Changeset 735 for trunk/Modules/NetworkConfigRouterOS/Generators

Timestamp:

Apr 6, 2015, 1:03:33 PM (10 years ago)

Author:

chronos

Message:

• Added: Support for Internet free access. Unregistered users are redirected to activation page where they can found useful information and activate free access for 24 hours.

Location:

trunk/Modules/NetworkConfigRouterOS/Generators

Files:

• FirewallMangle.php (modified) (1 diff)
• FirewallNAT.php (modified) (1 diff)

trunk/Modules/NetworkConfigRouterOS/Generators/FirewallMangle.php

@@ -133 +133 @@
 // Slow free internet
 $PacketMark = GetMarkByComment('free-out');
-$ItemsFirewall[] = array('chain' => 'inet-1-out', 'out-interface' => $InetInterface, 'action' => 'mark-packet', 'new-packet-mark' => $PacketMark, 'comment' => 'free-out', 'passthrough' => 'no');
+$ItemsFirewall[] = array('chain' => 'inet-1-out', 'out-interface' => $InetInterface, 
+  'action' => 'mark-packet', 'new-packet-mark' => $PacketMark, 'comment' => 'free-out', 'passthrough' => 'yes');
 $PacketMark = GetMarkByComment('free-in');
-$ItemsFirewall[] = array('chain' => 'inet-1-in', 'in-interface' => $InetInterface, 'action' => 'mark-packet', 'new-packet-mark' => $PacketMark, 'comment' => 'free-in', 'passthrough' => 'no');
-
+$ItemsFirewall[] = array('chain' => 'inet-1-in', 'in-interface' => $InetInterface, 
+        'action' => 'mark-packet', 'new-packet-mark' => $PacketMark, 'comment' => 'free-in', 'passthrough' => 'no');
+// Unregistred clients add to address list
+$ItemsFirewall[] = array('chain' => 'inet-1-out', 'out-interface' => $InetInterface, 'src-address' => '10.145.0.0/16', 
+        'action' => 'add-src-to-address-list', 'address-list' => 'unregistred', 'timeout' => '1d', 
+        'comment' => 'unregistred-clients');
 
 //print_r($ItemsFirewall);

trunk/Modules/NetworkConfigRouterOS/Generators/FirewallNAT.php

@@ -109 +109 @@
 $Items[] = array('chain' => 'dstnat', 'dst-address' => '212.111.4.174', 'protocol' => 'udp', 'dst-port' => 53, 'in-interface' => $InetInterface, 'action' => 'dst-nat', 'to-addresses' => '10.145.64.8', 'to-ports' => 53, 'comment' => 'DNS_redirection_UDP');
 
-
 // Chain for local interface
 $Items[] = array('chain' => 'srcnat', 'out-interface' => $LocalInterface, 'action' => 'jump', 'jump-target' => 'local-out', 'comment' => 'local-out');
 $Items[] = array('chain' => 'dstnat', 'in-interface' => $LocalInterface, 'action' => 'jump', 'jump-target' => 'local-in', 'comment' => 'local-in');
+
+// Accept free-access clients
+$Items[] = array('chain' => 'dstnat', 'dst-address' => '!10.145.0.0/16', 
+        'src-address-list' => 'free-access', 'in-interface' => $LocalInterface, 
+        'action' => 'accept', 'comment' => 'Free_access');
+// Redirect unregistred clients to free access activation page
+$Items[] = array('chain' => 'dstnat', 'dst-address' => '!10.145.0.0/16', 
+        'src-address-list' => 'unregistred', 'in-interface' => $LocalInterface, 
+        'action' => 'dst-nat', 'to-addresses' => '10.145.64.8', 'to-ports' => 82, 'comment' => 'Redirect_unregistred');
 
 /*