Community discussions

MikroTik App
 
User avatar
CZFan
Forum Guru
Forum Guru
Topic Author
Posts: 2098
Joined: Sun Oct 09, 2016 8:25 pm
Location: South Africa, Krugersdorp (Home town of Brad Binder)
Contact:

Need help with limiting Internet Access

Mon Oct 23, 2017 9:15 pm

Hi Guys,

I have a client with a CRS109 and SXT LTE connecting to Internet via LTE. LTE / 3G costs being expensive here, I am looking at ways to limit users internet / download access on this device.
The users do not need Internet access (Except E-Mail) to fulfill their jobs and is more of a recreational purposes while on lunch / tea
I thought of 2 ways achieving this:

1. Hard and Fast Draconian Style
Block all except big boss's internet access (Except E-Mail access) during the day outside of Lunch / Tea Times

2. A bit more dynamically
Track connection byte size,
Anything bigger than 15Mb mark connection and packets (To allow even the biggest e-mail they can receive)
Add destination of these destination / packets to address list
Drop these connections and Block internet access for users (Destination Address) in address list for next 12 hours

I have not tested this in anyway and just thinking of way to do so I can decide on best way, at the moment method 2 is the preferred method.

Off the bat, I can think of a couple of problems with this method, i.e:
1. Download managers typically open multiple connections, which means that 15Mb per connection limit might not be so effective.
2. Will add further complications to the setup, i.e. add connection limits, not sure if this is even possible

Will my ideas work?
Are there better ways of achieving this?
What do the clever guys out there use for something like this?

If you need more info on this scenario, please shout ;-)
 
User avatar
lbachero
newbie
Posts: 38
Joined: Wed Oct 08, 2014 4:39 pm
Location: Dublin
Contact:

Re: Need help with limiting Internet Access

Mon Oct 23, 2017 9:48 pm

The email access is through Browser or Mail Client/APP?
 
User avatar
CZFan
Forum Guru
Forum Guru
Topic Author
Posts: 2098
Joined: Sun Oct 09, 2016 8:25 pm
Location: South Africa, Krugersdorp (Home town of Brad Binder)
Contact:

Re: Need help with limiting Internet Access

Mon Oct 23, 2017 9:55 pm

The email access is through Browser or Mail Client/APP?
Can use both, but they only use client/app from office, i.e. Outlook.
 
User avatar
lbachero
newbie
Posts: 38
Joined: Wed Oct 08, 2014 4:39 pm
Location: Dublin
Contact:

Re: Need help with limiting Internet Access

Mon Oct 23, 2017 10:01 pm

I'll suggest to liberate only ports 587,110,etc.
But how they use with browser too, it's not possible.

You can limit with Connection Bytes, how you said, or create a hotspot with bytes limit per user.
Both works.

Who is online

Users browsing this forum: itimo01, Stevenbull88 and 35 guests