Modem/Router with ability to set quotas per device etc

[iceman]

Hi guys

I've currently got a Billion 7800N modem/router, and while it's ok, it lacks any of the software controls to properly control a house of teenagers and manage a 100GB monthly limit effectively.

I'm after software that will allow me to:
- See usage by device
- Set quotas per device
- Block sites per device

etc

I don't want to have to install a separate firewall or linux box. I would imagine that there's modem/router software that can do that these days.

Any suggestions/recommendations?

Cheers

[killswitch]

Gargoyle firmware/routers.

I use DD-WRT on a netgear router. It can set speed to each device and put a hosts file to block sites and ads (MVPS hosts file) It cannot set a quota though, although its got great bandwidth monitoring tools.

[michaellxv]

+1 for Gargoyle. I used it on a Netgear router for exactly the purpose you describe.

[iceman]

Thanks guys, sounds good.

Did you find/buy a router/modem that has Gargoyle pre-installed, or did you flash it?
Exactly what netgear router did you both get? Is it a modem/router or just a router?

btw it looks like Gargoyle has quota functionality (http://www.gargoyle-router.com/wiki/lib/exe/detail.php?id=screenshots&media=screenshots:14_quotas.jpg) now.

The site alludes to having routers to buy with it preinstalled, but there's nothing on their shop page. Maybe it's only available in the US?

[killswitch]

Sorry i meant i use DD-WRT firmware now which can do what you need except for quotas.

I had flashed Gargoyle on my Netgear WNDR3700 v2 but i re-flashed it to DD-WRT because it had some features i needed more. You can only get v3 these days which isnt Gargoyle compatible.

Gargoyle is only compatible for non-modem routers as far as i know, so your gonna need to connect it on top of your Billion.

According to the October 2013 archives (http://web.archive.org/web/20131019082954/http://www.gargoyle-router.com/shop/), they used to sell the TP-Link WR1043ND preloaded. Might wanna contact them.

[michaellxv]

I used the Netgear WNDR3800, the specific model on my box is WNDR3800-100AUS. I've had it for a while now so no idea what is currently available in OZ. I had to hunt around to find one in Adelaide but got it from MSY at the time.

It wasn't directly listed on the supported hardware list but I found some references to it and there is an image to download for it. Best thing is to check the website and then see what is currently available.

[iceman]

Thanks for the info.
I just bought the WNDR3800-100AUS.

http://www.tech4u.com.au/product_info.php?products_id=278488

and there's some links to the Gargoyle for it here: http://forums.whirlpool.net.au/archive/1893182

So since my Billion is a modem/router, and this is just a router, do I need to plugin the router to the Billion via cable, and turn off Wifi on the Billion?

[michaellxv]

Yes, use the wan port on the Netgear to connect to the Billion. Turn off the wifi on the Billion and put it into modem only mode.

One thing I did before putting Gargoyle on the Netgear was to just connect it up and get it working with the native firmware first. Just to test that the Netgear did work before I went messing with it.

[iceman]

Thanks for all the help. Will let you know how it goes when it arrives.

[cookie1]

Glad I checked this thread, Ive been agonizing about how to control the kids internet use as its becoming a problem..

will definitely look at this open source firmware!

cheers!

[Astro_Bot]

If you want more feature-rich options (that are free for home use - just supply your own old/second-hand hardware) then you should look up:
1. Sophos UTM (http://www.sophos.com/en-us/products/unified-threat-management.aspx) (used to be called Astaro) - Linux-based, very professional, with everything but the kitchen sink in features - commercial product but free for home use (http://www.sophos.com/en-us/products/free-tools/sophos-utm-home-edition.aspx)
2. pfSense (http://www.pfsense.org/) - FreeBSD-based "industrial strength" firewall with specific add-ons for filtering, anti-virus, intrusion prevention, etc. - lighter on resources but not quite as feature-rich as Sophos and requires a bit more knowledge to configure
3. IPCop (http://ipcop.org/) - Linux-based firewall, with add-ons, not as feature-rich as Sophos - uses same free web filter as pfSense

There's also:
4. Untangle (http://www.untangle.com/) (also Linux-based, very professional with comprehensive features) but you only get the Lite version (http://www.untangle.com/software-packages) for free, with additional components requiring a subscription. Mind you, the Lite version might have all you need.

For something really simple, you could try:
5. OpenDNS (http://www.opendns.com/home-internet-security/parental-controls/opendns-home/) - it provides customisable filtering. You can open a paid subscription to get (IIRC) fewer limitations and extra features or just use the free service. There's no software/hardware required - just set your DNS to point at OpenDNS's servers (assuming your ISP permits third-party DNS).

I've used all of the above at one time or another. Presently, I use Sophos UTM (on a cheap, second-hand Pentium P4 box) and pfSense (on an ALIX2 (http://www.yawarra.com.au/hw-alix2.php) box). I don't use a "retail grade" router, just a dumb modem in front of my custom router/firewall.

[cookie1]

Thanks Astro_Bot,

I'm attempting to reduce my footprint, as it stands I have a synology NAS on 24/7 and a media PC. Unfortunately the synology just has not got the "parental controls" to achieve the outcome, otherwise it would be perfect!
I have been using my wifi router time controls to turn off the wifi at certain times, its ok, but not very flexible. I'm not worried about their data use, just the time they "would" spend online if given the chance!

Used opendns, but my kids quickly figured out how to get around it.

[michaellxv]

If you want time restrictions based on hour of day just put a timer switch on the modem.
Gargoyle gives you the ability to set time controls (as in time of day) per host but this may be no better than what you already have.

[cookie1]

Unfortunately I cant completely power that router down as I have other PC's on the LAN, WLAN no problem, as I have my own "parents" router running from my synology when the main router turns off.

Bloody kids.. they make things so complicated :)

I picked up a cheap 2nd hand 3800 router so keen to have a play with Gargoyl. Finally get rid of this pathetic belkin router.. ugh

thanks

[killswitch]

Belkin made the worst routers in history. Destroy it!

I had some security issues with dd-wrt, so i reflashed my router to Gargoyle again.

The latest version is much better from what I remember. It still lacks some advanced settings though like splitting the dual bands to different passwords.

[cookie1]

oh don't get me started about the belkin! grr

will post my experiences once I get it setup.

cheers!

[cookie1]

Got the 3800 setup with gargoyle, very easy to do. However, it does not function quite the same way as my old modem and it appears I have to change my network configuration to make it work. This is my basic setup

internet -> billion7404VGP -> 3800 -> servers+clients

My understanding is that I have to setup the 7404vgp in bridge mode and allow the 3800 to do all the routing for the network?

As with most things tech based, I looked at how to change the billion to bridge mode and the manual is a joke. Is it just change the "Encapsulation" to bridge LLC and turn off all the other router features of the modem?

does this sound right? bit nervous about changing my setup as it has worked flawlessly for years :)

[killswitch]

If you set up the billion as bridge mode, you need to setup PPPoE on the 3800 to establish the link.

If you dont want to use bridge mode, you can just use disable DHCP and WIFI on the billion but you will have double NAT. Its a common network misconfiguration but it will still work just fine for home use.

[cookie1]

Ok great thanks. Got it setup in bridge mode, works great so far with no issues. Time to fully configure gargoyle! cheers!