limiting internet access via SOCKS proxy/firewall / net cafe linux distro / smoothwall ARGH HELP!

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › limiting internet access via SOCKS proxy/firewall / net cafe linux distro / smoothwall ARGH HELP!

weblordpepe

460 posts

Ultimate Geek
Inactive user

#12158 2-Mar-2007 04:08

OK the topic is a little vague, let me explain my delemma.

I have ADSL, and due to events untold I will be moving to a plan which has excess usage. I will be having flatmates move in, and I want to keep track of how much internet each flatmate uses, and control their bandwidth.

Idealy, I want them to plug into the LAN (or the WIFI here) and be presented with a page to login, and then have internet access which is restricted/counted.

Basically a net-cafe at home.

PLEASE advise on which software I can use to get this going. I have been experimenting with Smoothwall however I'm having bad luck finding restriction features on a per-user basis and for non-HTTP.

Here is my hardware setup:

http://silenceisdefeat.org/~weblordpepe/pepeslan.gif

The smoothwall machine is a p2 400MHz 96mb, 6gb HDD with two NICs working currently with Smoothwall 2 SP1. $37.50 from Super Shed in Chch.

I'm really clueless in this department, and I need flatmates in to cover my rent. Everyone wants internet access but I need a way of knowing who uses what etc. Any help would be appreciated times ten plus a million times infinity.

davidcole

6099 posts

Uber Geek
+1 received by user: 1465

Trusted

#62547 2-Mar-2007 08:20

I think chillispot is designed for this

http://www.chillispot.org/release/release-0.91.html#mozTocId867888

If you're running smooth wall I assume you can install this (don't ask me how to run it, I just know of the program).

Previously known as psycik

Home Assistant: Gigabyte AMD A8 Brix, Home Assistant with Aeotech ZWave Controller, Raspberry PI, Wemos D1 Mini, Zwave, Shelly Humidity and Temperature sensors
Media:Chromecast v2, ATV4 4k, ATV4, HDHomeRun Dual
Server Host Plex Server 3x3TB, 4x4TB using MergerFS, Samsung 850 evo 512 GB SSD, Proxmox Server with 1xW10, 2xUbuntu 22.04 LTS, Backblaze Backups, usenetprime.com fastmail.com Sharesies Trakt.TV Sharesight

weblordpepe

460 posts

Ultimate Geek
Inactive user

#62570 2-Mar-2007 12:55

zomg
thats exactly what I was after.

How is it that hours and hours of google searching brought up a bunch of dead ends, but one reply on geekzone saved the day?
Nows I just gotta get a tiny linux distro which has RPM support. Thanks heaps.

I don't suppose you can reccomend me one. Damn small linux doesnt come with RPM support does it?

davidcole

6099 posts

Uber Geek
+1 received by user: 1465

Trusted

#62573 2-Mar-2007 13:26

I don't know if VeryBusyBox can be run on a machine?? I only know about it and the chillispot because my Linksys WRT54G router using DD-WRT firmware instead of the linksys one is using VeryBusyBox linux.

weblordpepe

460 posts

Ultimate Geek
Inactive user

#62640 3-Mar-2007 01:35

OK Looks like I've found the right thing to search for. A 'captive portal'. It seems there's a few things out there. After browsing em all it looks like Wifidog is the right thing.

It has the abilitity to do bandwidth accounting. IE - user blobsmith has used 24mb this month, while user weblordpepe has used 3.2tb etc

SilentOne

290 posts

Ultimate Geek
+1 received by user: 8

#62668 3-Mar-2007 15:28

I'd be interested to see how it turns out.... care to keep us posted?

barf

643 posts

Ultimate Geek

#62717 4-Mar-2007 15:47

In Linux you can setup accounting without any extra software because Netfilter/iptables is awesome, but if you need control then look into chillispot.

in your iptables firewall script add the following (or similar):

iptables -A FORWARD -s bobs_ip
iptables -A FORWARD -d bobs_ip

to account based on MAC address instead of IP

iptables -A FORWARD -m mac --mac 00:11:22:33:44:55

and to view the data bobs_ip has used,

iptables -L FORWARD -v -n

to zero the counters

iptables -Z FORWARD

(if you want a whole iptables script made from scratch PM me with your eth1, eth0, ips etc)

Setting up chillispot is easy but setting up a RADIUS server for authorisation and an accounting database is another topic. I've setup data billing systems at a number of hotels based on MySQL, FreeRADIUS, chillispot, apache+php with a web interface. You can do what you want with out-of-the-box FreeRADIUS talking to chillispot (without the tricky MySQL backend). PS Don't try and do time-based tokens and you'll save some headaches :-)

pfsense has a captive portal built in, with web-based config all the way, highly reccomended. smoothwall and ipcop are not really distros to run a MySQL and RADIUS server on but if you can find a pre-built package then go for it (cross-compiling to uClibc takes a bit of effort).

Sniffing the glue holding the Internet together