Hi all,

i need some advice.

i want build a server that have features :

- login authentication
- traffic shaping / bandwidth management
- billing
- proxy

this is the scenario in my imagination,

user who want to connect to a LAN, s/he must be login via server.
say it http://192.168.1.1 or http://office.net
from the authentication, he got a IP from DHCP.

before that, we already configure group of IP.
192.168.1.5 - 192.168.1.25 --> accounting that only need bandwidth 32kb/32kb, each user in that IP range is assumed from accounting division.

192.168.1.26 - 192.168.1.50 --> supervisor need bandwidth 32kb/64kb
and so on...


And the server in above scenario can do :

if a user login, ex. user "John" , after he login, he got a IP, 192.168.1.5 which is he is a group of accounting.
Now, the server will filter that "John" traffic, which one is local traffic and internet traffic. for local traffic, he got full speed, but not with internet traffic.

about above case, which distro or package can suitable my expectations ??
enlightenment please...

thanks

What you want is a transparent squid proxy server with authentication. I have never used bandwidth shaping with it, my experience has been mostly with squid/dansguardian. Squid should be able to do the things you need.

afaik, transparent proxy can not combine with authentication... cmiiw

so, which package of authentication that can i use?

Your right, it cannot be transparent if you are asked authenticate. However you can block direct access to 80 so they have to use the proxy setting you set up. What authentication do you have available? I see (though never personally set up) that some people are using active directory for authentication. Here is a howto with ncsa authentication:
http://www.cyberciti.biz/tips/linux-...ntication.html
Could be real useful if you only had a few users.

Let me ask you a question what is your real goal? To punish a few bad users (I understand), to get your network bandwidth usage down, or control who has access to the internet?

just like i said above, i use it to limit each user (login name) bandwidth based on their authentication... not by IP or MAC...

i want to combine this authentication with a smoothwall distro, or ipcop distro... but there are no mod for this auth.

thanks