[||BOD||FLUX]

I am IT for a hotel in Dallas we use a valuepoint controller router nc3500

The problem I am having is that I have a bad bittorrenter who I need To ban from the router ( before you go off on me about bitotorrents the reason i need him off is he runs over 150 concurrent connections and overloads my router keeping my other guests from enjoying the internet I have many torrenters here but they are polite and keep bandwidth and connections down so other can utilize the free wifi )

the problem I am having is that I keep mac banning this guy and he logs right back on , he is not spoofing and I know the mac ban works I banned one of my machines to check, is there some way around a mac ban other than spoofing your mac that I am not aware of because this guy is eating up over 15megs of d/l bandwidth and screwing my other guests over and I need him/her gone

thanks for the help

[Mhypertext]

your could just limit his bandwidth by mac or ip

[rebelwarlock]

Originally Posted by Mhypertext

your could just limit his bandwidth by mac or ip

Last time I had a problem like that I got so ****ed I almost layed the guy out like a wet blanket. Your idea sounds much better in theory, but most routers don't have bandwidth limitations on them unless they're an actual box rather than your typical router/modem/switch combo (which almost everyone has). I think an easier solution might be to turn on the firewall rules and block that sort of traffic altogether.

[Mhypertext]

yeah you could just block torrents

[SniperXX]

Yeah if he cant get torrents, he will just give up and mooch off the next free wifi.

[ppe1700]

what router is it?

sad thing is, some people do ruin it for everyone. lock it down.

[Mhypertext]

Originally Posted by ppe1700

what router is it?

sad thing is, some people do ruin it for everyone. lock it down.

this is its hotel I work in IT at a casino hotel resort

I am sure the wifi is a guest vlan purk which cant be locked down how ever you can block torrents and limit bandwidth on the wifi and he would give up just do a search on torrent ports and start blocking them

[G3F0RC3<>R4D30N]

Can you not randomize torrent ports in uTorrent?

[don256us]

I was reading the documentation and you could consider the "cafe accounts". At time of check-in, guests could be given an account for the duration of their room rental.

http://www.valuepointnet.com/product...rs/nc3500.html

A more difficult task could be to tack down the user and sick the cops on 'em.

Is the user a guest or some one stealing bandwidth?

[SniperXX]

Originally Posted by don256us

I was reading the documentation and you could consider the "cafe accounts". At time of check-in, guests could be given an account for the duration of their room rental.

http://www.valuepointnet.com/product...rs/nc3500.html

A more difficult task could be to tack down the user and sick the cops on 'em.

Is the user a guest or some one stealing bandwidth?

For all we know they could be using a directional antenna and be a war driver.

[Mhypertext]

Originally Posted by SniperXX

For all we know they could be using a directional antenna and be a war driver.

those directional ant are bad they go a long way
be hard to track that

[YukonMaster]

Originally Posted by G3F0RC3<>R4D30N

Can you not randomize torrent ports in uTorrent?

Well for normal application you really only need port 80, 443, 21, 22 etc. That is enough for normal browsing, accessing FTP/SSH on standard ports etc, which is all free wifi is meant for anyways, if they want more than that they can use their home connection.

[ppe1700]

What G3Forc3 said.
Just lock outbound and inbound ports to 80 and 443. I would leave ftp, ssh etc

If you say its a guest vlan then it must be on a seperate interface of your firewall, so the above will be easy as anything.

Also, shame on you for having your wifi strength to high. It should not extend beyond the building at all. Unless you want things like this going on.

[SniperXX]

Originally Posted by ppe1700

Also, shame on you for having your wifi strength to high. It should not extend beyond the building at all. Unless you want things like this going on.

That doesn't take into account people that could use a long range directional antenna.

Closing off all unneeded ports does sound like the best idea.

[ShadowPho]

Originally Posted by ||BOD||FLUX

I am IT for a hotel in Dallas we use a valuepoint controller router nc3500

The problem I am having is that I have a bad bittorrenter who I need To ban from the router ( before you go off on me about bitotorrents the reason i need him off is he runs over 150 concurrent connections and overloads my router keeping my other guests from enjoying the internet I have many torrenters here but they are polite and keep bandwidth and connections down so other can utilize the free wifi )

the problem I am having is that I keep mac banning this guy and he logs right back on , he is not spoofing and I know the mac ban works I banned one of my machines to check, is there some way around a mac ban other than spoofing your mac that I am not aware of because this guy is eating up over 15megs of d/l bandwidth and screwing my other guests over and I need him/her gone

thanks for the help

Quick question:

You mac banned the guy and he logs back in. Does his MAC address stays the same? Does he change his MAC address? Does he log back in and remove the MAC ban?

[Mr.Guvernment]

you know allowing people to download illegal content on your connection could lead to some legal issues..... block utor for the sake of avoiding any legal problems.

[gangaskan]

Originally Posted by Mr.Guvernment

you know allowing people to download illegal content on your connection could lead to some legal issues..... block utor for the sake of avoiding any legal problems.

not only that, but QOS the crap out of 80 / 443 connections

[||BOD||FLUX]

To answer questions and i thank you very much for your advice
1. this stupid router only lets me block ports if I know both local and destination ip's (go figure)
2. no the person ion questionis not spoofing his mac address he does occationally change his fixed IP after i spend about an hour of kicking him off every 30 sec or so
3.I am working on the cafe accts but right now the firmware is not allowing them to set up properly ( I have actually posted on dd-wrt to see if this unit could that because it runs on a Linux kernel no answer there yet)
4. I have come to the point i am telling the owners we have to get an new router because this one is pure crap and in the mean time i am prob going to load my old dd-wrt linksys up in the mean time and use its cafe acct so i can at least control the place

[moto211]

what router model do you have? i might be able to help you out with that DD-WRT question.

[ziggo0]

Can you not ban by mac address?