Community discussions

MikroTik App
 
maxin
just joined
Topic Author
Posts: 1
Joined: Fri May 19, 2017 6:45 pm

Block download based on Size

Fri May 19, 2017 6:55 pm

This is somewhat annoying, i am sure guys here have had this experience so i need help please.

I have a remote site where i have a VSAT connection there - it has a CAP of 200GB monthly. Now the problem is , the users on the site (about 25 people) keep watching videos online , downloading movies, streaming non-work related stuffs.

I will like to have the ability to prevent them from streaming videos and limit the download size. mayb to 40MB MAX.

Does anyone know how i can prevent users from eating up my bandwidth ?

Thank you guys.
 
User avatar
ZeroByte
Forum Guru
Forum Guru
Posts: 4047
Joined: Wed May 11, 2011 6:08 pm

Re: Block download based on Size

Sat May 20, 2017 1:00 am

Read up on PCQ. I would suggest that you configure a PCQ with a per-queue limit of something like 256Kbps in the downstream direction, but allow an initial burst of something reasonable based on your site's avaialble bandwidth. This way, general-purpose surfing works as normal, but streaming will quickly exhaust the burst rate and be slowed to a level that makes it nearly useless, which is more effective than blocking. If you just make it suck too bad to use, people give up. If you block it, they take it as a challenge to get around the block.
 
User avatar
ZeroByte
Forum Guru
Forum Guru
Posts: 4047
Joined: Wed May 11, 2011 6:08 pm

Re: Block download based on Size

Sat May 20, 2017 1:03 am

Although, I tend to fall into the camp of those who prefer layer8 solutions - i.e. : "I see you streaming videos at work. You know what, you can go home and watch all the Youtube you like. Clear out your desk. We'll mail your final paycheck to you minus the data overages we pay this month."
 
TroyQ
Frequent Visitor
Frequent Visitor
Posts: 63
Joined: Thu Oct 20, 2016 10:02 pm

Re: Block download based on Size

Thu May 25, 2017 11:45 am

/ip firewall filter

add action=add-src-to-address-list address-list=Src address-list-timeout=1h \
chain=forward connection-bytes=40960000-0 disabled=no protocol=tcp \
src-address=192.168.0.0/24

add action=add-dst-to-address-list address-list=Dst address-list-timeout=1h \
chain=forward connection-bytes=40960000-0 disabled=no protocol=tcp \
src-address=192.168.0.0/24

add action=drop chain=forward disabled=no dst-address-list=Dst protocol=tcp \
src-address-list=Src

Who is online

Users browsing this forum: Inko13, Maggiore81 and 46 guests