MiM's questions

We want to limit the users Internet usage on a daily traffic basis but not the local network bandwidth. Our users are on different platforms (Windows, Android, IOS), therefore it is not possible to force any policies by e.g. Active Directory, and if it would be possible, it would limit the whole bandwidth. The only way that remains is to do the limitation on an IP basis at the edge of the network. This is possible using Mikrotik or other firewalls. But the problem is, that users can change their IPs when the limit is reached, and they can continue using the internet bandwidth. So the idea was to make sure that users can only pass when their mac address and the IP assigned through our DHCP server match. This should be possible in cisco switches and could be done on the core switch. I think i have read something about the connection between Cisco Switches and the DHCP Server.

The question is how is this possible, or is there any other solution that might be easier and more efficient?

We use APs, Cisco 2960 switches, and a Cisco 4500 as core switch. Our DHCP is FreeBSD but we are willing to change if it is needed. The authentication method for our APs is 802.1x.

EDIT:

We tried a solution using RADIUS server which gave us the possibility to know how much traffic was used by each user (through port 1812/1813), but the problem was the only way to limit the user is to not allow him to connect when his limit was reached. That means, until the user doesn't reconnect, he is able to download without any restriction.

We also thought of a Proxy server as a solution, but we had two problems:

1. We had performance issues with squid and installing squid as a transparent proxy is too much work.
2. Other proxies also had performance issues, and those who performed well, didn't have the feature to be used as a transparent proxy.

playsms with gammu gateway is not sending sms.

/var/log/gammu/smsd.log :

gammu-smsd[25994]: Starting phone communication...

gammu-smsd[25994]: Error at init connection: Can not open specified file. (CANTOPENFILE[28])

gammu-smsd[25994]: Going to 30 seconds sleep because of too much connection errors

but gammu is sending sms by this command

echo "sms test" | /usr/bin/gammu --sendsms TEXT ######

gammu-smsd configuration file:

# /etc/gammu-smsdrc

[gammu]

port = /dev/ttyUSB1

connection = at115200

logfile = /var/log/gammu/gammu.log

logformat = textall

[smsd]

Service = files

InboxPath = /var/spool/gammu/inbox/

OutboxPath = /var/spool/gammu/outbox/

SentSMSPath = /var/spool/gammu/sent/

ErrorSMSPath = /var/spool/gammu/error/

InboxFormat = unicode

OutboxFormat = unicode

TransmitFormat = auto

debugLevel = 1

LogFile = /var/log/gammu/smsd.log

DeliveryReport = sms

DeliveryReportDelay = 7200

CheckSecurity = 0

also gammu-smsd-inject is not working

echo "All your base are belong to us" | gammu-smsd-inject TEXT #### output of this command:

-smsd-inject[19831]: Using FILES service

-smsd-inject[19831]: Configuring

SMSD...

-smsd-inject[19831]: SHM token: 0xffffffffce00170a (-838854902)

-smsd-inject[19831]: Warning: No PIN code in /etc/

-smsdrc file

-smsd-inject[19831]: CommTimeout=30, SendTimeout=30, ReceiveFrequency=0, ResetFrequency=0, HardResetFrequency=0

-smsd-inject[19831]: checks: CheckSecurity=0, CheckBattery=1, CheckSignal=1

-smsd-inject[19831]: mode: Send=1, Receive=1

-smsd-inject[19831]: deliveryreport = sms

-smsd-inject[19831]: phoneid =

-smsd-inject[19831]: Inbox is "/var/spool/

/inbox/" with format "unicode"

-smsd-inject[19831]: Outbox is "/var/spool/

/outbox/" with format "unicode" and transmission format "auto"

-smsd-inject[19831]: Sent SMS moved to "/var/spool/

/sent/"

-smsd-inject[19831]: SMS with errors moved to "/var/spool/

/error/"

-smsd-inject[19831]: Created outbox message OUTC20140315_122347_00_sms0.txt Written message with ID /var/spool/

/outbox/OUTC20140315_122347_00_sms0.txt

Any idea why the sms messages are not being sent?

I configured a nginx as reverse proxy. I wanna access to a site by two below addresses:

1. stats.test.com
2. test.com/stats

test.com and stats.test.com located on 2 diffrent servers. my problem is that when client access the site by stats.test.com, every thing is OK and nginx shows client ip. but when client access site by test.com/stats nginx shows the Nginx reverse proxy server IP. frontend configuration for stats.test.com:

upstream stats.test.com{
  server 192.168.0.130;
}

server {
  include /etc/nginx/default_server_settings;
  server_name  stats.test.com;

  location / {
    include /etc/nginx/default_location_settings;
    proxy_pass http://stats.test.com;
  }
}

frontend configuration for test.com/stats:

upstream test.com{
  server 192.168.0.11;
}

upstream stats{
  server 192.168.0.130;
}

server {
  listen 80 default;
  include /etc/nginx/default_server_settings;
  server_name test.com;

  location / {
    include /etc/nginx/default_location_settings;
    proxy_pass http://test.com;
  }

  location /stats/ {
    proxy_pass http://stats/;
  }
}

backend configuration for stats :

server {
   listen   80 default;

   access_log  /var/log/nginx/stats_access.log;
   error_log   /var/log/nginx/stats_error.log;

   # Disable all methods besides HEAD, GET and POST.
   if ($request_method !~ ^(GET|HEAD|POST)$ ) {
     return 444;
   }

   root /var/www/stats/public_html;
   index index.php index.html index.htm;

   server_name stats stats.test.com;

   location / {
     try_files $uri $uri/ /index.html;
   }

   location /doc/ {
     alias /usr/share/doc;
     autoindex on;
     allow 127.0.0.1;
     deny all;
   }

   location ~* \.(js)$ {
     expires 14d;
   }

   # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
   location ~\.php$ {
     fastcgi_split_path_info ^(.+\.php)(/.+)$;

     fastcgi_pass unix:/var/run/php5-fpm.sock;
     fastcgi_index index.php;
     include fastcgi_params;
   }

   # Return a 404 for all text files.
   location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
     return 404;
   }
}

I set this in nginx.conf:

set_real_ip_from 192.168.0.2;
real_ip_header X-Forwarded-For

192.168.0.2 is nginx reverse proxy server ip.