[Chilli] MAC blacklist and other security measures

[David Bird]

Hm.. one way might be to enable MAC authentication such that:

- You always return Access-Accept (plus attribute Chillispot-Config =
'splash') for non-blocked users.

- You can return an Access-Reject for blocked users. When used with
--macauthdeny, it means these devices will be ignored. 


On Thu, 2010-03-18 at 14:04 -0300, Felipe Augusto van de Wiel wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
> 
> Hi,
> 
> 	Recently we find out that some of our clients
> were consuming too much traffic, mainly because of virus.
> I did a short hack to force those MACs to be logout every
> little while.
> 
> 	I couldn't find on the docs some sort of
> blacklist or other measure to forbid clients. Is there
> such resource in Coova?
> 
> 	Our hotspot is open, which means we only have a
> captive portal so people can read the terms of service
> before access the Internet.
> 
> 	What are you doing in order to increase the
> security of the hostspot zone? Traffic shapping? Blocking
> a lot of ports? Proxy?
> 
> Kind regards,
> - -- 
> Felipe Augusto van de Wiel <felipe.wiel at hpp.org.br>
> Tecnologia da Informação (TI) - Complexo Pequeno Príncipe
> http://www.pequenoprincipe.org.br/    T: +55 41 3310 1747
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
> 
> iQIcBAEBCgAGBQJLol0SAAoJECCPPxLgxLxPS0cP/Rwc5B9SA35KZMqttm9T9Dhd
> UlXcxqHUuklkQcwGwQf8aQT2LLfUhwUMq/aK232AH0Sr7jrhVvS1CvYYw8Vj4f/z
> mtd0SbnSAmzaYPEEeDnn/3wHOp0qMQEc+G3jxn+uXbqhgb1RYrZEbWzWE7fbLH5P
> 64v2ks+sL/1tr3P8SLq1Am2FOUpB2eKkerRTmeJaeLZcdzv26WlZEacdg/qqIZDe
> HBM4fQV0QpQXOIECplLgIVs+7imbgrEyfAoW6V/vIfjouqs288Iq/ajM7jjBiUAM
> jTrtexiiRBA7k6UgdiYpRDpG8ppiiI6SWSSu1zubIpkC+hm90540dZcZD+xswE8B
> uPvz0YnRjkYqgBiObGS7jNJkATw6MCCzSBtZT9al2SZVcjSmU+cKr3kHcIjmkCRD
> T24YnQa1GN4d9byZfOjOdPqFKXtMa8yVfQeS28sfhdl/U6szSMk6rq+AyppVl4WS
> rJFaKWx4zVHFwirE0cbWiwav+nGFWapcMsCxY9jibME3EDkxPZbddekjDQ8jQhBd
> eD/MuR2HziUaSCl7jZXr6pIgefSbFNPcPNsKQpPaFWvJRvDDdMrKYS6lued4iDqT
> 6YWCPnfE5XVwxCYIHr8q8KK3as+MPoWKH1GtlEd28Rv+tgJni8Sj772tDo60sd6v
> fQLPF4lf7kWfX1i5TR4N
> =VYth
> -----END PGP SIGNATURE-----
> _______________________________________________
> Chilli mailing list
> Chilli at coova.org
> http://lists.coova.org/cgi-bin/mailman/listinfo/chilli