How to make quotas for Internet access for local network workstations?

Question

linux

Hello! There is such a task:
Set up a transparent proxy + web interface for monitoring who went
where Traffic quotas for workstations + web interface for monitoring and statistics + quota settings for each computer.
Determine a computer by netbios name, or by poppy, but in the interface (web face) it should be displayed by netbios name.
What I plan to use: ubuntu server, dnsmasq, squid, netfilter
How I imagine it: set up port 80 and 443 forwarding to squid, natit all other traffic. All traffic is counted for each client, and with the help of rules, for each client, restrict access to the Internet, if the download quota is exceeded.
Who has any ideas with the implementation of this task?

Answer 1

In general, I decided to use Kerio Control. Everything can be done out of the box, and it is not expensive. Thanks to all!

Answer 2

As I imagine it: configure port 80 and 443 forwarding to squid, natit all other traffic. All traffic is counted for each client, and with the help of rules, for each client, restrict access to the Internet, if the download quota is exceeded.
Who has any ideas with the implementation of this task?

Good. You can implement.

Answer 3

Determine a computer by netbios name, or by poppy, but in the interface (web face) it should be displayed by netbios name.

Brad, there will definitely be a cunning ass that will watch porn without straining under the guise of a boss.
If you need control over users, then raise the domain controller, on the proxy, authorization by the domain user with the rules prescribed for it.
If the problem is that the traffic is not rubber and the channel is dead, then it is much easier to let it go to the Internet stupidly according to the "white" list, believe me the list will not be so large (the main thing is to open full access to all their client banks).
If you just desperately want to watch users where they go there, given that you don’t have a domain, then it will be much easier to do all this through any Mikrotik or ROS device in full force, whatever you want.
I didn’t see any questions from you, you just heard about ubuntu \ squid somewhere and you don’t even really understand what it is for and how to implement all this.
The very first point in Google solves most of your ... .
If you hope that now someone will rush and throw off ready-made configs that are ideal for you, and even write the entire webmord with all the Wishlist, then you are very mistaken.
You had to start by doing at least something, and if you run into a problem that you can’t solve or don’t understand, go to the toaster.

Answer 4

Set up a transparent proxy + web interface to monitor who went where
squid. Just keep in mind that the squid does not have a web muzzle, never has, and most likely never will. Sams, Sarg - some of this is probably still alive. Or a bicycle.
Traffic quoting for workstations + web interface for monitoring and statistics + quota settings for each computer.

I do not know the finished software, maybe some opensource billing will help - in principle, the task is similar.
Determine a computer by netbios name, or by poppy, but in the interface (web face) it should be displayed by netbios name.
Eee, wait, what are you going to quote by IP ??? Have you already thought about protection against changing IP by employees (or who you will have there)?