I have an OpenVPN server which authenticates the users using an Active Directory server. I need to limit the bandwidth of each user based on their usernames, and I also want to be able to do some basic packet filtering on OpenVPN users. Users are assigned random IP addresses and I prefer to not change that. How can I do that?


Don't use Pf for that.

ipfw2 would be simpler because with its dummynet-subsystem you can enforce equal bandwidth sharing policy for all of IPs in a given IP-network. Check out ipfw2 pipes and queues.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.