i noticed that on 2.9.39

yes, that's right since some VSAT systems or even DSL modems don't priorties/manage traffic passed to them, IN this case PCQ and queues have very limited benefits, you should try a firewall rules that limits speed and manage traffic based on number of packets per second for each user/ip

Hi guys,
when modifying a firewall rule under filter, nat, mangle, don't forget to disable and enable that rule after setting/modifying .... I noticed sometimes the rules behave stangely or improperly after modification unless I disable then enable it again.

Cheers

hi there,
do u want to limit number of tcp conn per user or per interface? pls specify

in your PPP profiles, set Change TCP MSS to no for all profiles assigned to your users (secrets), this will reduce CPU utilization to a significant level

i switched to PPPoE solution for its high security, i just added the same users to PPP secrets and: 1) for limiting users by uptime, i used a MT script which runs every 1 min and used the comment field to enter the allowed uptime for users (because in PPP we can't use Uptime Limit as in hotspot).......

dear nazadnan, hackers can get working IP of clients through advanced TCP sniffing tools, it is easy I think i will switch to PPPoE, but the problem is : How can the user know his status such as uptime and used quota? ! There are three possible solutions: 1. Using external RADIUS where the user can ...

In this scenario, when the hacker first connected to the hotspot, he will get a Temporary IP address and when he run any scanning programs, all what he get is a few IP's / MAC's for other unauthorized customers and he will never see the authorized IP's / MAC's because they are in deferent pool (sub...

newtonek, set Change TCP MSS to no to reduce CPU utilization

dear pedja, you will lose all flexibility and features of hotspot when using VPN or PPPoE instead

sergejs, if you mean using RADIUS, that's mean additional cost, also some OS and hardware don't support all EPA protocols

Hi guys, Everybody knows mac cloning problem, the attacker can modify his wireless card mac by cloning a mac of authorized user, he also can get the IP of that user using simple or advanced tools, then he can surf internet without paying, all solutions presented in old posts are either not prefered ...