|
Thread Index [isp-wireless] RE: P2P blocking and Mikrotik
I agree. We are working on a Linux Server that will do what we want when we want and will not even cost 25% of that. Chris Bivens CEO Network administrator Sciotowireless.net Portsmouth OH ----- Original Message ----- From: "Bob Ross" <br@kingmanaz.net> To: <isp-wireless@isp-wireless.com> Sent: Thursday, October 30, 2003 6:51 PM Subject: [isp-wireless] RE: P2P blocking and Mikrotik > Thanks, but that pricing will be to much right now. > > > +++++++++++++++++++++++++++++++ > As Seen on The Discovery Channel > September & October 2002 !!! - Our > Wireless Service Received National > Recognition !!! > > Also Used by the following: > > VH1-Classic - South Dakota Event > Siemens Westing House (Power Plant People) > Kiewit Construction (Route 68 Build) > Las Vegas Band "Slaughter" > The Jethro Tull Band > Cast of major motion picture "21 Grams" > > 928-718-1781 > > Mail filter key: 86gjk985sxbnljguyl765gfjmkj65frjoh54fdbn0 > > ----- Original Message ----- > From: "Nathan Fouarge" <nfouarge@getthewave.com> > To: <isp-wireless@isp-wireless.com> > Sent: Thursday, October 30, 2003 4:39 PM > Subject: [isp-wireless] RE: P2P blocking and Mikrotik > > > I do not have current pricing since we havn't boughten anything from them > for like 3 years, but here are some numbers. I can get you ahold of my > salesman that calls me every year for a service contract. > > 202-2Mb with Service contract $5700 > 202-10Mb with Service contract $8700 > > Nathan Fouarge > FirstBackup Support > 114 N Dodge > Algona, IA 50511 > 515-295-6900 x74 > > > > > > -----Original Message----- > From: Bob Ross [mailto:br@kingmanaz.net] > Sent: Thursday, October 30, 2003 5:25 PM > To: isp-wireless@isp-wireless.com > > What was the cost? > > +++++++++++++++++++++++++++++++ > As Seen on The Discovery Channel > September & October 2002 !!! - Our > Wireless Service Received National > Recognition !!! > > Also Used by the following: > > VH1-Classic - South Dakota Event > Siemens Westing House (Power Plant People) Kiewit Construction (Route 68 > Build) Las Vegas Band "Slaughter" > The Jethro Tull Band > Cast of major motion picture "21 Grams" > > 928-718-1781 > > Mail filter key: 86gjk985sxbnljguyl765gfjmkj65frjoh54fdbn0 > > ----- Original Message ----- > From: "Nathan Fouarge" <nfouarge@getthewave.com> > To: <isp-wireless@isp-wireless.com> > Sent: Thursday, October 30, 2003 2:51 PM > Subject: [isp-wireless] RE: P2P blocking and Mikrotik > > > We use network enforcers made by www.allot.com and they work perfectly. We > have some customers that want to use p2p apps heavily so they pay a little > more and we put them into a group that can upload more and download more p2p > stuff. The only problems we have with the allot boxes are cosmetic in the > gui. We run 2 allot boxes one for our wisp customers and one for our cable > modem customers. The detail you can get is amazing, I can tell exactly what > protocals a specific user is using, and where it is going, if we feel so > inclined. > > Nathan Fouarge > Amberwave Communications > 114 N Dodge > Algona, IA 50511 > 515-295-6900 x33 > > > > -----Original Message----- > From: Michael Bell [mailto:mikeb-lists@map.com] > Sent: Thursday, October 30, 2003 3:40 PM > To: isp-wireless@isp-wireless.com > > We are doing Layer-7 protocol analysis and filtering using Cisco 7000 series > routers. Since we run an entire Cisco network (please note that my original > response was to the P2P filtering issue, not Mikrotik specific) it only > seemed appropriate to use Cisco filtering. > > All I can say is that this WORKS. There are no 2 ways about it. The Cisco > solution is by far the best ISP-ready solution available. I say this from > experience. We provide networking for several colleges and private schools > so we do the kind of traffic that would be an ideal case study for this type > of technology. In the past year, we have tried 5 different solutions and the > only one that could handle a ATM backbone circuit without falling over dead > was the Cisco. > > We can identify traffic on a per protocol (not port/address) basis which > even the most sneaky P2P application cannot spoof. Our match rate is over > 90% with 0% false positives. What this means is that out of all our traffic, > 90% is identified properly with the remaining 10% being classified as > 'unknown'. If it identifies a packet of type FTP or KaZaA for example, it is > ALWAYS an FTP or KaZaA packet. > > This type of filtering is the EXACT same thing that cable companies are > putting into place nation wide. Here in Mass, Our local cable company is > putting caps on the kazaa downloads and uploads using this type of filter > but because it only effects that application, web browsing and email are > totally unaffected. Although they are not admitting to doing this, we have > confirmed via actual trials that this is indeed what is going on. The trick > is to figure out what a good speed ratio is and cater to that figure. For > us, the 1k/s per person is perfectly acceptable since it doesn't impact > downloading. Less then that would affect search packets and thus be noticed. > > And here is the kicker, all that was necessary to start filtering our > traffic was THREE LINES in the config. With that, every packet that goes in > or out of our network is protocol tagged and we can do what we want with > them. > > Mike > > ----- Original Message ----- > From: "Bob Ross" <br@kingmanaz.net> > To: <isp-wireless@isp-wireless.com> > Sent: Thursday, October 30, 2003 4:01 PM > Subject: [isp-wireless] RE: P2P blocking and Mikrotik > > > | 1K/Sec ? > | > | I could only get my outbound to only go to 10K before it didn't work at > all > | with the TT CPE-AP. > | > | I don't see how it works with that. Someone sends a long email 20-30K they > | will call because their email is hanging. > | > | Got a little more info on this to what your doing to fight the P2P? > | > | Thanks > | Bob > | > | +++++++++++++++++++++++++++++++ > | As Seen on The Discovery Channel > | September & October 2002 !!! - Our > | Wireless Service Received National > | Recognition !!! > | > | Also Used by the following: > | > | VH1-Classic - South Dakota Event > | Siemens Westing House (Power Plant People) > | Kiewit Construction (Route 68 Build) > | Las Vegas Band "Slaughter" > | The Jethro Tull Band > | Cast of major motion picture "21 Grams" > | > | 928-718-1781 > | > | Mail filter key: 86gjk985sxbnljguyl765gfjmkj65frjoh54fdbn0 > | > | ----- Original Message ----- > | From: "Michael Bell" <mikeb-lists@map.com> > | To: <isp-wireless@isp-wireless.com> > | Sent: Thursday, October 30, 2003 1:02 PM > | Subject: [isp-wireless] RE: P2P blocking and Mikrotik > | > | > | > It has been our experience that 99% of the trouble that P2P networks > cause > | > is due to outgoing traffic. We have gotten numerous complaints from > | > customers stating that ever since they got wireless, their computers are > | > running very slow. EVERY ONE of them was due to having everybody in the > | > world download from their computer as fast as it can dish it out. The > RIAA > | > isn't truly concerned with people downloading the music, they're > concerned > | > with people distributing the music. You eliminate people from > distributing > | > it, you eliminate people downloading it. > | > > | > We have been successfully filtering OUTGOING P2P traffic for over 2 > months > | > now and have not had a single complaint. Downloads are just as fast as > | > before, uploads are just throttled back to 1k/sec. Now the few customers > | on > | > our network who believe in the P2P ideals and want to share their music > | with > | > the rest of the world, we point them to our TOS which states "no servers > | > allowed on residential connections" and offer them the business > | connection. > | > Never once did we receive a request to switch. Most people have this > idea > | > that the Internet is free. It isn't. WE have to pay for the bandwidth > and > | > quite frankly, if I have customers complaining about their download > speeds > | > due to the 5+ times more outgoing traffic filling the lines, P2P is the > | > first to go. 8MB/s out vs 2MB/s in is a serious problem regardless of > how > | > you look at it. > | > > | > Mike > | > > | > > | > > | > ----- Original Message ----- > | > From: "Bryan Clark" <bryan@eburg.com> > | > To: <isp-wireless@isp-wireless.com> > | > Sent: Thursday, October 30, 2003 2:35 PM > | > Subject: [isp-wireless] RE: P2P blocking and Mikrotik > | > > | > > | > | Is this P2P blocking feature only available in the 2.8 beta version > | > | right now? And if not... how do I get in on this action? :) > | > | > | > | Gino Villarini wrote: > | > | > | > | >we just installed this yesterday too... but we are not blocking p2p, > we > | > just > | > | >gave them a 100 kbps for all to share! they wouldnt know the diff, > | > because > | > | >they think the place they're downloading from is slow! > | > | > > | > | >Gino > | > | > > | > | >-----Original Message----- > | > | >From: Erik Stave [mailto:erik@pfbiz.com] > | > | >Sent: Thursday, October 30, 2003 3:05 PM > | > | >To: isp-wireless@isp-wireless.com > | > | >Subject: [isp-wireless] P2P blocking and Mikrotik > | > | > > | > | > > | > | >Last week I installed a Mikrotik 2.8beta box configured as a bridge > | > | >after the router. We are blocking P2P file sharing and the results > have > | > | >been very entertaining. People will not actually call up and tell you > | > | >that Kazaa is not working. It is the "Internet" has stopped > working... > | > | >Or I cannot get to the sites that I need. > | > | > > | > | >We have had one customer cancel... Traffic during the daytime has > | > | >remained the same essentially, but evening and weekend traffic is > | 25-30% > | > | >lower. > | > | > > | > | > > | > | >Erik Stave > | > | >VP/CTO > | > | >erik@pfbiz.com > | > | >Prairie Fire Communications > | > | >140 N Phillips, Suite 404 > | > | >Sioux Falls, SD 57104 > | > | > > | > | > > | > | >I've stopped 3,677 spam messages. You can too! > | > | >One month FREE spam protection at > http://www.cloudmark.com/spamnetsig/ > | > | > > | > | > > | > | > > | > | > > | > | > > | > | > > | > | > > | > | > > | > | > | > | > | > | > | > | > | > | > | > | > | > > | > > | > > | > > | > | > | > | > > > > > > > > > > > > > > > > > > This e-mail was scanned by RAV Antivirus. (www.ravantivirus.com) > This e-mail was scanned by RAV Antivirus. (www.ravantivirus.com)
Thread Index |
|
