[wellylug] limiting international traffic.

[Tim Nicholas]

On Fri, Oct 31, 2003 at 07:24:01PM +1300, Ilia Pavlenko wrote:
> Greetings.
> 
> My brother has a linux-based router on his flat's LAN, plugged into
> Parasite's cable. End of month, and they discovered that they almost up to
> the megabyte limit for this month.
> 
> What is the easiest way to limit international traffic, but keep NZ
> flowing? iptables -> DENY ALL -> ALLOW 203.96.0.0/16 ?
> 
> Has anyone got iptables scripts they willing to share :)
> 
> Thanks in advance,


Ensuring that you include all NZ IPs is non-trivial, there are
various web pages about that can help. 

Have a look at http://noc.maxnet.net.nz/nationalroutes/ for
starters. Note that Paradise/Telstra and Maxnet might differ on the
details of what is national and what is international. 

A script to automatically set up the appropriate routes is something
that I've been meaning to make for a while. Either rate limiting,
rejecting or just routing out a different interface (real or virtual)
Since I'm unemployed again now, I might even get around to it! 


Cheers, 
Tim



> 
> Ilia
> 

-- 
Tim Nicholas                          ||                      Cilix
Email: tim at nicholas.net.nz            ||    Wellington, New Zealand
http://tim.nicholas.net.nz/           ||   Cell/SMS: +64 21 337 204