[RadiusNT] Re: RadiusNT Digest

Edsonet ( administrator@yellowhead.com )
Thu, 14 Oct 1999 11:39:20 -0600

I don't know of any good way of stopping this, because as far as your
system is concerned, the traffic is coming from one single IP address. You
could monitor a suspected abuse using a network monitor, but that is very
labour intensive. On dial-up accounts, you can implement inactivity
timeouts, maximum session timeouts, and total useage limits. For example,
we have the following implemented:

inactivity timeout - 30 minutes
maximum session timeout - 5 hours
maximum useage - 50 hrs/week

The most useful one, and the one that an abuser will probably run afoul of,
is the maximum useage. We offer unlimited access, but we took care to
define unlimited access as being distinct from unlimited time. It was not
an easy decision and one that we laboured long and hard with before
implementing. It reduced the number of abusers from over 3% to less than 1%.

Since we now offer High Speed Internet options that do not require a
dial-up connection (wireless & DSL), the problem has moved from one to the
other. These dedicated connections can very quickly consume your available
bandwidth. For these services we have imposed a maximum 5 GB/Month limit.
Customers who subscribe and pay for a LAN connection get this limit
adjusted upwards. Measuring that useage is a different problem. Both the
wireless and DSL systems support SNMP, and we are currently working on a
Manager program that will periodically poll all the connections and log to
a database.

J.A. Coutts
Systems Engineer
**************** REPLY SEPARATER ******************
At 09:13 AM 10/14/1999 -0700, you wrote:
>Subject: [RadiusNT] utilization
>From: "Emad Hazza" <hazza@first.net.jo>
>Date: Thu, 14 Oct 1999 12:58:18 +0200
>Any idea on how to counter the over utilization of dialup users for the =
>link. The problem is that we sell a dialup unlimited hours plan, on the =
>bases that it is to be used by on user, but what some users do is that =
>they use their account to connect multiple users on a lan, which means =
>that more than 5 users will be using the link at the same time through a =
>proxy server, this puts an extra load on our bandwidth.

For more information about this list (including removal) go to: