Page 1 of 1

quota system broken?

Posted: Thu Mar 03, 2011 10:26 pm
by iamedmond
Hi all :)

Here's my scenario, after assigning static ip addresses paired with respective mac addresses, and with the "Block MAC addresses assigned a static ip that connect from a different ip" box ticked, in order to enforce quota for each specfic users.

The problem is that if a user manually changes his/her ip address, he/she can still connect to the router and therefore bypass the quota system -- unlimited data!!! Is this a bug?

Anyone having the same problem? Workarounds?

Thanks!!!

Re: quota system broken?

Posted: Fri Mar 11, 2011 12:12 am
by ven1meux
Yep, same problem.

For now I'm looking for: tweaking iptables rules, locking user's ip address on their computers with a script...

Yep, iptables tweaking seems to be good. I've added rule

iptables -t raw -A PREROUTING -s <here goes my white ip address> -m mac --mac-source <white mac address> -j ACCEPT

iptables -t raw -A PREROUTING -j DROP

May be there is other way?

Re: quota system broken?

Posted: Mon Mar 14, 2011 7:58 am
by tauki63
hi,

Can I know how to manually change IP address to bypass the quota system?

Is it changing the ivp4?

How about restrictions?

try using that to block other ip address. i think it works for both lan and Wlan. I think you should use the whitelist.

hope this helps. Regards,
Tauki