User manual

If SAT is being used, for example with a web server or ftp server, that traffic also needs to be forced
into pipes or it will escape traffic shaping and ruin the planned quality of service. In addition, server
traffic is initiated from the outside so the order of pipes needs to be reversed: the forward pipe is the
in-pipe and the return pipe is the out-pipe.
A simple solution is to put a "catch-all-inbound" rule at the bottom of the pipe rule. However, the
external interface (wan) should be the source interface to avoid putting into pipes traffic that is
coming from the inside and going to the external IP address. This last rule will therefore be:
Rule
Name
Forward
Pipes
Return
Pipes
Source
Interface
Source
Network
Destination
Interface
Destination
Network
Service Prec
all-in in-pipe out-pipe wan all-nets core all-nets All 0
Note
If the SAT is from an ARPed IP address, the wan interface needs to be the destination.
10.1.12. More Pipe Examples Chapter 10. Traffic Management
406