Intranet Traffic shaping

[henno]

Hi,

I've been looking around for software that will enable us to shape our internet traffic.

We have a fairly network, however we find that some users are abusing the internet by downloading large files, running P2P, etc, which affects the rest of us.

Note, we do want to allow the above mentioned practice just in moderation, or throttled/shaped.

I found the InJoy firewall, which seems to be great, and got it working. However their trail software only allows two active connections to it (2 unique MACs).

Are there other firewall software that we could use?

We currently have IPCop as our firewall however it's shaping capabilities seems a bit limited, especially when compare to InJoy.

Feedback much appreciated.

 

[Peon]

There are 100's of methods to solve you problem. Are you running a Windows or Linux lan. I presuming the former.

Routing and Remote Access -> Inbound and Outbound Filters -> Block all ports except port x,xx,xxx,xxxx. Then URL filterting. Check DNS logs and see who is going where. BLOCK. You can buy 3rd party apps but builtin domain environment you can achieve the same thing.

 

[Tsimo]

you can try a smoothwall (Free firewall) box with QoS. ask the Librarian. hes the smoothie docktore

 

[cornestoltz]

I use Endian Firewall at some of our branches. Works very well and the up and down bandwidth can be globally throttled. Apart from that the normal AV and content filtering are also onboard

http://www.endian.com/en/community/

 

[Peon]

If we going Linux gateway then rather give clarkconnect a try. Its very scaleable. Can add sql,web and mail server if you should choose. The bw filter and shape comes standard.

 

[|tera|]

Setup an Untangle dedicated Gateway: www.untangle.com

We use it at work for a 100 plus user network and it definitely works, hardly needs upkeep or any maintenance.

 

[Peon]

Tera, did you buy additional modules?

 

[|tera|]

Tera, did you buy additional modules?

No. We've managed to do everything we need just with the free modules.

 

[henno]

Thanks for all the feedback. Will investigate today.

 

[henno]

Feedback, I've create vm's for each of the above. Must say untangle looks awesome. Will give it a try later today.

 

[|tera|]

Feedback, I've create vm's for each of the above. Must say untangle looks awesome. Will give it a try later today.

 

[Asha'man X]

There is pfSense, which has some really advanced traffic shaping tools. It's based off of FreeBSD, and from what I have read, it's used by some very big corporations to manage some very fast internet lines.