Page 1 of 1

Need quick and east non-payment redirect for a single customer

Posted: Sat Apr 20, 2019 2:39 am
by sleerf
We're in the middle of moving to splynx which will be configured to handle non-payments and such. I have one customer I need to do something about quickly. All I want to do is redirect them via mac address to a paypal checkout page without them being able to get anywhere else. I want to block all other http and UDP traffic for that mac address. This is a temporary situation as we plan to roll out splynx next week but in the meantime i need this customer to stop having access to the internet for free and instead push her to a paypal checkout page. Is there a fast and easy way to do this?
We're using DHCP so redirecting via IP isn't sensible. if she disconnects and someone else gets that IP later it would be that person blocked wihch is why I want to use her MAC.

Re: Need quick and east non-payment redirect for a single customer

Posted: Sat Apr 20, 2019 2:51 am
by Sob
There's src-mac-address matcher, so you can use that on directly connected router.

Re: Need quick and east non-payment redirect for a single customer

Posted: Sat Apr 20, 2019 3:08 am
by sleerf
There's src-mac-address matcher, so you can use that on directly connected router.
Thanks. Would you mind being a little more specific? I'm not sure exactly what you're referring to.

Re: Need quick and east non-payment redirect for a single customer

Posted: Sat Apr 20, 2019 3:24 am
by Sob
I kind of hoped that you have it all figured out and you only missed the part how to match against MAC address instead of IP address. ;) In other words, that you'd only exchange src-address=1.2.3.4 for src-mac-address=01:02:03:04:05:06 in your solution.

But your request as whole is not exactly easy. You'd have to find what addresses Paypal uses, and probably allow access to their whole network, because you can't be sure what all different subdomains they may use and where they point to. And that's still the simple case without them using any external dependencies (I have no idea if they do). Next part is the actual redirection. Hotspot can do that, but it only really works well with plain http, but today it's https almost everywhere...

Re: Need quick and east non-payment redirect for a single customer

Posted: Sat Apr 20, 2019 4:36 am
by sleerf
I kind of hoped that you have it all figured out and you only missed the part how to match against MAC address instead of IP address. ;) In other words, that you'd only exchange src-address=1.2.3.4 for src-mac-address=01:02:03:04:05:06 in your solution.

But your request as whole is not exactly easy. You'd have to find what addresses Paypal uses, and probably allow access to their whole network, because you can't be sure what all different subdomains they may use and where they point to. And that's still the simple case without them using any external dependencies (I have no idea if they do). Next part is the actual redirection. Hotspot can do that, but it only really works well with plain http, but today it's https almost everywhere...
There is an https link directl to her invoice. My thought was to redirect anythin and everything directly to that address. but then of course if she clicks the link it would block that. So I get your point. So I'll add to the question. Can I redirect to https://www.paypal.com/anything_else? The invoice is like this: https://www.paypal.com/invoice/p/#_rand ... gofnumbers. Clicking the link takes you to https://www.paypal.com/webapps/hermes?t ... fNumbers==

Re: Need quick and east non-payment redirect for a single customer

Posted: Sat Apr 20, 2019 4:29 pm
by flynno
You should just email or text the client and tell her that the internet will end on such a date unless payment is received and reconnection fee will incurr if payment is not made nake the text look automatic and robotic like

Re: Need quick and east non-payment redirect for a single customer

Posted: Sat Apr 20, 2019 8:16 pm
by solar77
as suggested by flynno, easy way would be contact the customer and get paid, instead of spending time on a solution that you only need for few days.

PS: you can make her IP static on the DHCP server so it is the same IP every time. you can argue that she could then change IP to another static IP but if she's capable of doing this, she's capable of changing mac address of her connecting device. Google goes a long way....