Forum Replies Created
you might be able to spot the problem with live http header plugin for firefox.
do some minimal tests, first with no ZS router, then with, and compare results.August 14, 2010 at 2:37 pm in reply to: How to enable User Accounting & Connection Tracking Feat #50922
Thank you for your reply. i thought acounting feature is added in this release.
oh and i forgot to address your last question, you want to keep a log of what sites your users have visited. this can be done by enableing the transparent proxy and setting log on all activity.
Yes it is possible to do what you want.
set up ZS with two network cards, have them bridged and make sure the one AP you want CP for has its traffic coming in on the “inside” of the bridge.
then enable CP in bridge mode (on the inside network) and you should be in business.
alternativly you can use a firewall rule that maches the offending traffic. when you need it just activate it, should be simpler than messing with individual user accounts etc.
i was having the same kind of issue, bridged ZS with proxy being slow, turns out that traffic from the proxy was getting cought in the very low bandwidth default qos class, in any case, check that if you are having this issue too and the above posts didnt help.
First when I enable it:
oh yes and it did make statistics but it seems that it doesn’t any more.
I did try to reboot the router with no luck.
Thanks in advance
What kind of network topology do you have, and what subnet have you activated bandwidthd for?
also what are the specs of the machine running zeroshell, and how much traffic/user do you usually have?
allthough seems like you have a single cpu machine and bandwidthd being configured for 3 subnets. each 200 seconds or whatever the zeroshell bandwidthd default is, it will redraw the graphs and that can be pretty cpu intensive, so first off i would try to lower the number of subnets it has to draw graphs for.
How do you figure out what what your primary and secondary DNS is? I have a linksys router and can’t figure out what the primary and secondary dns are. Thanks!
your zeroshell can act as a dns server. please check here: http://www.zeroshell.net/eng/opendns/#dns-forwarder
you can also configure your clients with opendns servers (18.104.22.168 and 22.214.171.124 ) or have these two ip’s served up by your dhcp server.
and for all those situations where you need to resolve a domain name but cant remember the ip of a dns server there is the google public dns at the ip 126.96.36.199 or the level3 open dns server at 188.8.131.52
great story about the above here: http://www.tummy.com/Community/Articles/famous-dns-server/
i have topology like this one :
inet — Load Balancing HW (3 pppoe conn) — proxy transparent squid — switch — host client ( router a, b, c, d, e)
where i should place ZS for benwith management ?
should i use route or transparent ZS ?
how about global benwith i should use since there asymetric ?
thanks for some assistance …
well, assuming a wired network, then there is no need to manage or limit the speed of data coming out of the proxy cache, so i would put zeroshell in between your load balancer and the proxy. I would conf it for bridge mode for the least amount of trouble. you can get some hints on how that works from this guide: http://digidownload.libero.it/smasherdevourer/schede/linux/zeroshellEN.pdf
the tricky part is to identify your traffic patterns and determining your qos classes, as well as classifying them.
another feature that might be to your advantage in connecting the no popup devices, is to make each client authenthication last longer than the default, for instance 1 hour or more, its unlikely in most use cases that a mobile (as in roaming) user will stick around that long, and if they do, they just have to log in again when their session expire.August 12, 2010 at 3:24 pm in reply to: How to enable User Accounting & Connection Tracking Feat #50920
In beta 13 accounting is not implemented yet, though you can get some tracking functionality of bandwidth usage from the bandwidthd feature found under captive portal. that along with DHCP and static DHCP bindings should ensure some validity of the data, allthough a MAC address can be spoofed.
also in the captive portal under graphics, you can see how many people are currently connected, and how long they have been so, though in graph form.