version 2.9
I have some user, I have to ban, from the net
I have the user in mangle, whith ip adresse, if I try to disable, is still getting traffic
when user is ban / disable, can they bee redirect to a web-site, to get a message
what / how to do ??
yancho
March 15, 2006, 10:40pm
2
ip firewall filter add chain=forward src-address=bad.user.ip action=drop
I am new in this, do I have to use the terminal to this, or where ??
jager
March 15, 2006, 10:59pm
5
Yes. Redirect all his traffic on port 80 to server that will display your “You`re disabled/banned” page. It can be an another apache process on your existing web server that will listen on different port than 80.
And, finally, drop all his other traffic.
yancho
March 15, 2006, 11:00pm
6
upz sory little typing error:
ip firewall filter add chain=forward src-address=bad.user.ip action=drop
I make it in filter rules
add
general
chain: forward
src adress: ??
how to make src adress “bad.user.ip”
I only can do 0.0.0.0
Forget the last,
Do I need to do that evertime i have a user, ther have to be disable
“can I use the disable in mangle”, because I have 100 user
and i very easy to klick on disable
I have try, but it don’t work
jager:
Yes. Redirect all his traffic on port 80 to server that will display your “You`re disabled/banned” page. It can be an another apache process on your existing web server that will listen on different port than 80.
And, finally, drop all his other traffic.
How to make it?
can you make an example
jager
March 15, 2006, 11:25pm
10
chain=dstnat src-address=disabled.user.ip.address dst-address=!your.web.server.ip
protocol=tcp dst-port=80 action=dst-nat to-addresses=your.web.server.ip
to-ports=81
can you make this like a standart, to all who is disable, or do you have to make a rule everytime, somthing more easy
is the same when I disable, I have to make a rule on the ip adress.
is there a more smart way to this, in mangle there is a butten disable
can it be use to switch users off
I suggest you to use authorization and accounting system (HotSpot), that will allow to handle router users more easily,
http://www.mikrotik.com/docs/ros/2.9/ip/hotspot