help with monitoring internal network.

[lamponelley]

Hi, I have a ADSL Linksys modem/router at home, I'm sharing this connection to my Linux Server, my Macbook Pro, my XP Desktop, and my brother piggy-backs off it.

My brother promised me he'd only use it to play wow and not download, but most of the time my speeds are absolutely horrible. I just wanna be able to monitor/ shape/ throttle what he does (I mean I pay the bill- I should be the one who can download), is there any way I can setup my network to work like this:

My Macbook/Xp Desktop/ Bros PC -> Linksys Router -> Linux box(have my monitor/shape/throttle tools) -> Linksys Router -> Outside World?

Is this as simple as doing the following:

Connect all computers include server to linksys.
Disable DHCP on linksys.
Setup DHCP server, and ICS on linux box.
Make the default gateway on linux box the router.
Install my monitoring / shaping tools on linux box?

If it is do any of you guys know some utils I can use to accomplish this, otherwise please can you help?

 

[bleh69]

eish.. no... what you need to build is a gateway. ie. your linux box needs two network cards. (mine has one ethernet (connected to my internal network) and one wifi NIC (connected to my wifi adsl router) for example). Then you only connect your adsl router via ethernet (or wireless) to the linux box. then connect the other network interface to the rest of your network. You may need a cheap (~R400) switch or wireless access point (~R750) on the end to "route" all traffic into your linux box.

The reason i connect my gateway wirelessly to the router is to completely isolate my electronics from the phone line coming into the router. no more lighting taking out half my ****. :]

Its the only way. Google: build linux gateway... etc. .. its hectic... but you can then do anything. monitor his traffic. shape it.... there are even tools you can just sit back and watch images/videos/ etc that hes is downloading/watching.

personally i use my gateway to protect my network.. i.e. firewall... (and host my media with xmbc (google it) as its connected to the tv)

 

[lamponelley]

damnit, I was really trying to save a trip to the shops to buy another nic, thanks for the help bleh69

 

[midkemia]

yep, get another NIc for your linux firewall, as then you can have a RED port, and a GREEN port.

you "can" pull reports on usage, although some of the firewalls, this functionality is kinda rudimentary.

 

[Cube3]

If you using a Linksys router, in most cases they have a MAC filter.

What you can do is block your bro's PC mac address and then specify what protocols/ports are allowed to pass..... and you could block torrent traffic etc.

 

[ponder]

If you using a Linksys router, in most cases they have a MAC filter.

What you can do is block your bro's PC mac address and then specify what protocols/ports are allowed to pass..... and you could block torrent traffic etc.

What's up with you and MAC filtering? Do you work for Linksys and do you know how limited MAC filtering actually is?

 

[fixx]

Install netflow analyzer


http://fixx.co.za/?p=16

 

[The_Unbeliever]

URL Filter on Smoothwall + SARG + bandwidthd

URL Filter = blocks bad sites (eg porn or hate sites)

SARG = web traffic data per IP (what sites was visited etc)

bandwidthd = traffic graphs and bandwidth usage per IP