IP prepaid accounting

2000-06-06 Thread Hans Huebner
Hi there, I am in need of a prepaid IP accounting scheme for FreeBSD. What I want to be able to do is: I want to allocate a certain byte quota to an IP adress (or a subnetwork) and have the kernel automatically block the adress as soon as the quota has been used up, optionally generating a kern

Re: IP prepaid accounting

2000-06-07 Thread Hans Huebner
Hi there, I've made a first shot at the prepaid system I described yesterday. Citing the ipfw manpage: The usage of IP quotas is illustrated by the following example: First, a quota entry is set up: ifpw quota set guest quota 10 warn 9 The above rule creates

Re: IP prepaid accounting

2000-06-07 Thread Hans Huebner
On Wed, 7 Jun 2000, Poul-Henning Kamp wrote: > It should be possible to say say > >ipfw deny all ip from any to any exquota any > > as well as: > >ipfw deny all ip from any to any exquota guest Do you say that in principle you agree with the "quota action, but you want

Re: IP prepaid accounting

2000-06-07 Thread Hans Huebner
On Wed, 7 Jun 2000, Poul-Henning Kamp wrote: > >I'll disallow the name "any" for quota names. This is not exactly pretty, but > > Make it so that if no name is specified all apply ? I'll code the "any" into ipfw.c. The kernel code only verifies the quota name if the string is not empty. -Han

Re: PCI Wavelan adapter timeouts

2000-06-07 Thread Hans Huebner
Hi, I'm using Orinoco WaveLAN cards with FreeBSD successfully. Here is the relevant dmesg output of my router at home (a P200 on an Asus PCI board): pcic0: at port 0x3e0 iomem 0xd irq 10 on isa0 pcic0: management irq 10 pccard0: on pcic0 pccard1: on pcic0 This is a ISA-PCMCIA bridge man

Re: IP prepaid accounting

2000-06-08 Thread Hans Huebner
On Thu, 8 Jun 2000, Luigi Rizzo wrote: > sorry if i lost part of the discussion, but why dont you > just associate a quota with a rule and specify one of the > two possible results when exceeding quota: >ipfw match-upto 20MB >ipfw deny-above 20MB > where the first syntax does not