quota system broken?

[iamedmond]

Hi all

Here's my scenario, after assigning static ip addresses paired with respective mac addresses, and with the "Block MAC addresses assigned a static ip that connect from a different ip" box ticked, in order to enforce quota for each specfic users.

The problem is that if a user manually changes his/her ip address, he/she can still connect to the router and therefore bypass the quota system -- unlimited data!!! Is this a bug?

Anyone having the same problem? Workarounds?

Thanks!!!

[ven1meux]

Yep, same problem.

For now I'm looking for: tweaking iptables rules, locking user's ip address on their computers with a script...

Yep, iptables tweaking seems to be good. I've added rule

iptables -t raw -A PREROUTING -s <here goes my white ip address> -m mac --mac-source <white mac address> -j ACCEPT

iptables -t raw -A PREROUTING -j DROP

May be there is other way?

[tauki63]

hi,

Can I know how to manually change IP address to bypass the quota system?

Is it changing the ivp4?

How about restrictions?

try using that to block other ip address. i think it works for both lan and Wlan. I think you should use the whitelist.

hope this helps. Regards,
Tauki