I'm in need of some good advice.

I need to monittor the traffic that is generated by each classroom/student.

3 classrooms with each 15 computers in it.

The 3 classrooms are all in same network range, connected with hubs.

A lot of students are leeeching lots of stuff . So I need to do some monitorring and possibly check which mac address generates that kind of traffic and sanction the student who's causing that problem.

I will also need to implement a firewall to block a lot of incoming and outgoing ports.

It should be implemented on a Debian r3.02.


So I was thinking of using ipchains for the firewall.

I will use mrtg for sure, but I'm a little bit confused as of how to monittor each different pc in the network ... is this possible without sniffing each packet to check which mac address is sending it ??

info would be appreciated ! :-)

use iptables instead of ipchains. there is a tool called ipac-ng. it's doing a good job for accounting, but with a little knowledge you can skip that. afaik you can combine it with mrtg.
read the manuals and this shouldn't be hard.

also have a look at www.netfilter.org for very good docs about iptables.

sl mritch.

Thx a lot for advice...

I recompiled kernel with 2.6.8, included all necessary modules for packet filtering and iptables :-)...

I also configured the gateway, so traffic from cisco(192.168.1.1) is now going to 192.168.1.2(eth0)

eth1 10.0.0.1 (I chose 10.0.0.0 as network range, maybe i'll change them afterwards) , gateway for 10.0.0.1 = 192.168.1.2.

So for the moment I can do some surfing from 10.0.0.0 to Wan, just need to config the ipmasq cause a lot of ports i forwarded from cisco to 192.168.1.2 are not RE-forwarded to 10.0.0.x ip.

cheers !Any idea where this ipmasq config file is located and perhaps a good link with lots of info about configuring it ?

I only find Redhat faqs about ipmasq...