control with StarOS

[sure-data]

I'm trying to see where control of who gets on the network stops.
I have a StarOS AP with StarOS Client router.

I can restrict his access at his router to one MAC address.

If my customer puts another cheap router behind the StarOS at his site, and clones the MAC address, or if he turns on Internet Connection Sharing, is there any way for me to know?

I'd like to sell some packages for just one computer/user at at time.

[lonnie]

They can use a SOHO router and NAT, just like connection sharing on Windows. The only way that I know of would the excessive number of connections indicating more than one user. It is pretty tough to prove, and without proof you would have a hard time doing anything about it.

[wmaia]

Is there a way to limit the simultaneous number of sessions by type (http, mail, etc) ? If it was possible, we can sell limited services, no matter how many machines the client can install behind the router.

[sure-data]

So can we do something like the FreeBSD ipfw:

ipfw add allow tcp from my-net/24 to any setup limit src-addr 10
ipfw add allow tcp from any to me setup limit src-addr 4

[lonnie]

Is there a way to limit the simultaneous number of sessions by type (http, mail, etc) ? If it was possible, we can sell limited services, no matter how many machines the client can install behind the router.

I belive they do this with satellite systems. We'll see what it would take to have a configurable connection limitation.