ADSL usage Problem

Hi there,



Problem: A network of roughly 10 Mac's all connected through two hubs
including one Nokia M1122 ADSL router.

Someone has downloaded a huge amount of software and racked up a huge bill
on the account.



I want to set up something to control this. What do people recommend?



Would ultimately like it so that one computer has full access to the
internet and every other computer has only email access. But with some
feature that the user on the one computer with full access could allow
another user on another computer internet access for a specified amount of
time.



Might consider getting a PC computer to act as a proxy server / gateway.
Does anyone have any practical ideas? This is for a small business on a
JetStreme600 plan.



Also what is the default login & password for the Nokia M1122? Is there a
web interface? Or do I have to access it through telnet? It was sold by
Telecom.



Thanks

Karl

 

Sorry about the large gaps between the paragraphs.

I wonder if I can do port blocking or port redirecting to a fake IP? What
does the Nokia M1122 support?

 

Karl- are the Macs using OS X or Mac OS 9?

I'm sure there are various OS X utilities now available to do this sort
of thing. Checking http://www.versiontracker.com/macosx/index.shtml would be a good place to start, and then after that
try www.macosxhints.com

I would imagine that the Nokia router has fairly limited features to
control port blocking to certain IP addresses on the LAN, so your next
bet would be to see what features the other router on the LAN has.

I think the M1122 may have a web interface, but I'm not sure. I have
lower-end i500 which can only be accessed by telnet.

M.


|Problem: A network of roughly 10 Mac's all connected through two hubs
|including one Nokia M1122 ADSL router.
|
|Someone has downloaded a huge amount of software and racked up a huge bill
|on the account.
|
|
|
|I want to set up something to control this. What do people recommend?
|
|
|
|Would ultimately like it so that one computer has full access to the
|internet and every other computer has only email access. But with some
|feature that the user on the one computer with full access could allow
|another user on another computer internet access for a specified amount of
|time.
|
|
|
|Might consider getting a PC computer to act as a proxy server / gateway.
|Does anyone have any practical ideas? This is for a small business on a
|JetStreme600 plan.
|
|
|
|Also what is the default login & password for the Nokia M1122? Is there a
|web interface? Or do I have to access it through telnet? It was sold by
|Telecom.
|
|
|
|Thanks
|
|Karl
|
|

 

One has MacOs X

be a good place to start, and then after that

Thanks, I might check it out

Only one router, the other 'hub' is just a dse 5port hub.

Yeh I think so, I am gona have a look at it tomorrow. Dont have any PC's
there to tellnet into it

 

There are telnet programs available on both Mac OS 9 and OS X. (OS X has
telnet built in I believe)


|Yeh I think so, I am gona have a look at it tomorrow. Dont have any PC's
|there to tellnet into it

 

Sweet, thanks. What are common ports to block to prevent p2p?

 

1189 is what kazaa listens on. there are heaps of others hto. It will alledgidly
tunnel via HTTP if needed, but I havent seen that happen.

It can also prioritise traffic based on port (So it appears) - I have tried
putting RDP ahead of everything else to try to get smoother remote desktop
sessions, but I dont know if it really has made any difference.

 

You could use a Linux box between the network and the router and do port
based blocking there. This will also allow you to block certain ports from
certain workstations, leaving your to access them all (if that's what you
want). You could alternatively leave all ports open but deverly rate limit
certain ports. NetBSD could help do rate shaping.

Allistar.

 

btw a DSE download for the Nokia has the version Gx1x2220.r0x

Is this newer then the .r05

 

If you were to switch your hub for a Linksys four or eight port switch,
it has all the required port blocking features accessible via a built in
webpage. Very easy to use.


||
|> And after upgrading my nokia to a later software it now appears to be able
|to
|> block by port... mmmm kazza gone...
|
|I rang Telecom today and they said my version of the Nokia M1122 firmware
|was upto date. (Gxlx2230.R04). I was searching arround the web interface for
|any options for blocking certain ports but I could not work out how to do
|it.
|
|I dont see how the pinhole blocking can help, isnt this when you have for
|example a webserver you want to use externally on say port 80 behind the
|router? I dont see how this can prevent internal users from
|uploading/downloading on that port??
|
|Currently the users are on DHCP and I dont see any problem with this.
|
|Under the Services Tab there are the following options, Names, NAPT,
|Firewall and Filter.
|
|The Firewall and Filter options have nothing in them to edit/modify so I
|dont see them being much use. The NAPT has a all connections global and a
|VCCI option for pinholes which I dont really think can do much. But the
|first one, Names, has about 8 predefined ports and I think you can add other
|ones, but no option for blocking ports. - I whould have thought only the
|ports listed here whould work behind the firewall, but it doesnt seem like
|the case.
|
|Thinking that, yeh the best was is to install a proxy server of some sort
|and put it between the router.