Limiting Downloads Per I.P.
I've just set up PFSense for a multi-user network (around 45 people). I'm using a PPTP VPN, so each user has their own username, password, and a static I.P. associated with that account. This network had two goals. The first goal was to prevent 'unauthorised' users from accessing the internet - this has been achieved using PPTP.
The second goal, however, I am at a loss as to how to implement. The owner of the network wishes to impose a 2gig per month download limit on all users. Once a user has reached this limit they are banned from accessing the internet until the next monitoring period begins.
I am, unfortunately, quite new to this part of things, and so I was wondering if anybody here could offer any advice, strategies, or otherwise as to how to go ahead with this.
I have already considered using bandwithd (which has been installed as a package) and having a script written to do this for me, however if there is an easier method (as my scripting is also not so good) then it would be greatly appreciated.
Thanks so much guys.
That would need CP and an allow by ip policy and Radius.
But all this is only possible in 2.0.
Okay, so…The functionality I'm looking for is not offered at all in the current version of PFSense?
How long do you think it will be until it is available?
I'm only asking because the person I'm doing all of this for is getting antsy about it...
i have some preliminar work on a userland traffic shapper.
but i need to test it on pfsense.
can someone help me ?
my program is based on TUN/TAP devices, but i did not really test it.
It can dinamically create pipes with timming - but currently i only implemented per packet delay (so you can configure packets per second).
but as i said, no tests…
Removed the packet/sec scheduler and implemented a token bucket, so we can work on a byte/sec basis...
Does your userland traffic shaper help to set limits of maximum bandwidth for each user? Does it work in conjunction with CP? Have you prepared it as a package?
Please provide more info and we could probably test it for you…
Is it working in CP or HD installation? thanks
search the forum you will find the tweaks needed to have this even on 1.2.3-RCX
Does it work in 1.01 and 1.2.1? Thanks