Using the INTERNET port makes me use TOS for outbound and the using our VOIP Providers IP for inbound, and is a little more complicated. Using the internal one would enable to to make the mangle rules using only the IP address of the PBX. I'm not sure if it would be smarter to apply them to the INTERNET port, or to the INTERNAL port. The other approach (would this be smarter?) is to apply the mangle rules to the ether1-local-master, and set the IP addresses to that of my internal PBX?
I also modifed the OUT mangle rules so that they were TOS = 46 and TOS != 46. address for my SIP provider address (as captured with TORCH during active calls). , substituting 'ether3' for 'ether0-gateway', and the 192. I've set it up like the example at the bottom of