x-ian / marsportal Goto Github PK

Seems to count more devices than actually only. E.g. Today only one device online, but 3 reported.

http://forum.ipfire.org/viewtopic.php?f=50&t=12868&sid=f2b5f8e0ab4f0eec24f2f52fa2557618&start=75

http://blockouttraffic.de/ua_installation.php

http://www.heise.de/forum/iX/News-Kommentare/Router-auf-FreeBSD-Basis-pfSense-Version-2-3-freigegeben/KMU-und-SOHO-Hardware-Empfehlungen-inside/posting-28480242/show/

push netflow stuff further

potentially integrate logstash and kibana? https://developer.wordpress.com/2016/02/08/open-source-netflow-with-elastic-logstash-kibana/

192.168.14.3 not reachable
192.168.14.4 not reachable
not reachable

pfSense: https://www.pfsense.org/about-pfsense/: "This product includes software developed by the pfSense Project for use in the pfSense® software distribution. (http://www.pfsense.org/)."
FreeBSD: https://www.freebsd.org/copyright/freebsd-license.html
freeRADIUS: http://freeradius.org/ GPLv2
MySQL: http://www.mysql.com/ GPL
Squid: http://www.squid-cache.org/ / Lightsquid: http://lightsquid.sourceforge.net/Index2.html: GPLv2
nTop, http://www.ntop.org/, GPLv3
yaf: http://tools.netsa.cert.org/yaf/libyaf/: GPL
bash/wget/curl/perl/php/ssmtp

in software/web page/docs

E.g. use
dig TXT +short o-o.myaddr.l.google.com @ns1.google.com | awk -F'"' '{ print $2}'
or
dig +short @resolver1.opendns.com myip.opendns.com
to collect networks public IP

investigate in pfsense backup

• http://www.wonkity.com/~wblock/docs/html/backup.html
• http://mfsbsd.vx.sk/
• https://doc.pfsense.org/index.php/Full_Backup

Unbound
https://doc.pfsense.org/index.php/Unbound_DNS_Resolver
https://www.unbound.net/documentation/unbound.conf.html
https://www.unbound.net/documentation/unbound-control.html
https://calomel.org/unbound_dns.html
https://unbound.net/documentation/libunbound-tutorial-1.html
https://www.unbound.net/documentation/pythonmod/examples/example0.html
http://www.unbound.net/documentation/pythonmod/examples/example2.html

Potentially also possible with PowerDNS
https://blog.powerdns.com/2016/01/27/per-device-dns-settings-selective-parental-control/
https://www.powerdns.com/
https://doc.powerdns.com/md/authoritative/installation/

Or maybe BIND
https://ejnetwork.wordpress.com/2014/01/17/blocking-domains-with-pfsense-using-bind/

pfBlockerNG?

Simple add an A record (?) to local DNS server, e.g. for facebook.com pointing to localhost

e.g. via http://php.net/manual/de/features.http-auth.php

Guess for both self-registration and add-user with Auth it could be helpful to include it.

https://forum.pfsense.org/index.php?topic=53846.0

from marsmonitoring.com

But it should also include devices that connected after the period started, but have consumed data

Use list from Netify (e.g. https://www.netify.ai/resources/applications/windows-update) to determine what kind of destination traffic it is.

Could be used for both blocking as well as traffic stats/reporting.

e.g. through

• http://www.tutorialspoint.com/php/mysql_paging_php.htm
• http://www.phpfreaks.com/tutorial/basic-pagination

Once a system reaches its data bundle during work hours, it will be disconnected and any further connection attempt -even outside of working hours- will be denied.

So if before lunch the work bundle is eaten up, the system won't be able to connect during lunch.

With mars-Max-Concurrent-Devices := 1 already the first connection is blocked.

otherwise if the system was off during change to/from work-mode, the settings wouldn't be applied (as the cronjob didn't run)

Like times when connected, where connected to, data transfered (per hour, day, week, month).

Guess this is a combination of dir client_activity_log, dir /var/log/radacct/127.0.0.1, table daily_accounting and table radacct.

in Neno within 5 months 6+ GB

Showing global / general information like

• traffic graphs
• overall data volume recently used
• devices connected recently

Personal data transfer stats

• Daily
• Weekly
• Monthly

Current work doesnt seem to work.

based on the text log files

Esp with status of freeRADIUS and mySQL services

compared to section "Registered devices overview"

This pops up in the client_activity_logs, guess this is wrong.

https://github.com/x-ian/marsPortal/blob/8202d48027e07cad1c838c84417ec7caefe5e6dd/misc/heartbeat.sh
@x-ian

[email protected]
AuthPass=GoingToIbiza