Setting up public Internet access in five minutes
Hi, Habr! Today we will tell how the owners of restaurants and cafes avoid fines for violating the law governing the organization of public Internet access. Recall that last summer a Russian government decree No. 758 appeared , according to which the organizer of public Wi-Fi access should identify users. The usual anonymous entry into the network is now illegal.
Violators face large fines: from 5 to 50 thousand rubles for individual entrepreneurs and from 100 to 200 thousand rubles for legal entities. In practice, a visitor to a cafe or restaurant can identify themselves online in two ways: send an SMS or data from a public services portal. Non SNILS, for example, will be enough, according to lawmakers.
Legislative initiative appeared, firstly, to block resources from the “black list” of Roskomnadzor (it is very easy to bypass these blockages, but today is not about that) and, secondly, to organize filtering of unwanted content for children.
')
Consider the real situation on the example of our product Traffic Inspector Restaurant Edition . Suppose there are several desktop computers in a restaurant or cafe that employees work at; In addition, there is public Wi-Fi, which is distributed to visitors.
1. The first thing to do is to split user groups. To do this, two groups are created in Traffic Inspector: “Workstations” and “Visitors”. In the section "Users and Groups" we find the item "Add a group", give it the name "Users".
2. In the settings of the new group, we redirect all traffic through the proxy server and do not forget to block all HTTP requests going past the proxy:
3. Remember that in the "Visitors" group, auto-add users and SMS identification must be configured. To do this, create a new rule for networks and specify a range of IP addresses. If necessary, set a separate IP for each computer on the network.
4. Specify the type of network as “Public” using SMS verification:
5. We allow auto-add users and specify the group "Visitors" to which they will be added. User authorization is possible by account, IP address and MAC address. If it is necessary (for example, I don’t want the visitor in a cafe, ordering a coffee, to sit there for half a day), we ask the user to automatically turn off after a certain time.
6. Specify the used SMS gateway. For sending free SMS messages, Traffic Inspector can use one of two SMS gateways - sms.ru or smstraffic.ru.
7. Next, create a NetPolice rule, set the name of the “Ban by category” rule and select the categories of prohibited content. Then select the “Deny access” rule type.
This completes the configuration of user groups, public WiFi network and content restriction.
From the user’s side, access will be as follows.
1. A cafe or restaurant visitor connects to the network from his device, goes to the identification page and enters his mobile phone number in order to get a unique code:
2. Receives an SMS message with an access code:
3. The user inserts the code and confirms that he is already 18 years old:
4. After that gets to the page with clear instructions and goes to the network:
Setting up wireless access in a cafe takes no more than five minutes, of which three minutes will be spent on the purchase of a license and two more minutes on setting up the Traffic Inspector. These five minutes in the future will relieve the owner of the institution from headaches and serious losses in the form of fines, the size of which we have already said.
It remains to add that the system administrator can see the network statistics of any user, including the amount of traffic, the time spent in the network and the resources visited.
In addition, not so long ago there was an opportunity to modify the Traffic Inspector portal page. The administrator can add to the page 192.168.0.1 : 8081 / portal an advertisement, banner, information about discounts and special offers, or a feedback form for receiving feedback on the quality of service that a cafe or restaurant can be an additional opportunity to promote and increase brand awareness. It is possible to place on this page links to groups and restaurant pages in social networks. The visitor should like the page, be added to the group or check in, after which he gets into the network. Or provide an opportunity for a regular visitor to create a personal page on the site of the institution.
Violators face large fines: from 5 to 50 thousand rubles for individual entrepreneurs and from 100 to 200 thousand rubles for legal entities. In practice, a visitor to a cafe or restaurant can identify themselves online in two ways: send an SMS or data from a public services portal. Non SNILS, for example, will be enough, according to lawmakers.
Legislative initiative appeared, firstly, to block resources from the “black list” of Roskomnadzor (it is very easy to bypass these blockages, but today is not about that) and, secondly, to organize filtering of unwanted content for children.
')
Consider the real situation on the example of our product Traffic Inspector Restaurant Edition . Suppose there are several desktop computers in a restaurant or cafe that employees work at; In addition, there is public Wi-Fi, which is distributed to visitors.
1. The first thing to do is to split user groups. To do this, two groups are created in Traffic Inspector: “Workstations” and “Visitors”. In the section "Users and Groups" we find the item "Add a group", give it the name "Users".
2. In the settings of the new group, we redirect all traffic through the proxy server and do not forget to block all HTTP requests going past the proxy:
3. Remember that in the "Visitors" group, auto-add users and SMS identification must be configured. To do this, create a new rule for networks and specify a range of IP addresses. If necessary, set a separate IP for each computer on the network.
4. Specify the type of network as “Public” using SMS verification:
5. We allow auto-add users and specify the group "Visitors" to which they will be added. User authorization is possible by account, IP address and MAC address. If it is necessary (for example, I don’t want the visitor in a cafe, ordering a coffee, to sit there for half a day), we ask the user to automatically turn off after a certain time.
6. Specify the used SMS gateway. For sending free SMS messages, Traffic Inspector can use one of two SMS gateways - sms.ru or smstraffic.ru.
7. Next, create a NetPolice rule, set the name of the “Ban by category” rule and select the categories of prohibited content. Then select the “Deny access” rule type.
This completes the configuration of user groups, public WiFi network and content restriction.
From the user’s side, access will be as follows.
1. A cafe or restaurant visitor connects to the network from his device, goes to the identification page and enters his mobile phone number in order to get a unique code:
2. Receives an SMS message with an access code:
3. The user inserts the code and confirms that he is already 18 years old:
4. After that gets to the page with clear instructions and goes to the network:
Setting up wireless access in a cafe takes no more than five minutes, of which three minutes will be spent on the purchase of a license and two more minutes on setting up the Traffic Inspector. These five minutes in the future will relieve the owner of the institution from headaches and serious losses in the form of fines, the size of which we have already said.
It remains to add that the system administrator can see the network statistics of any user, including the amount of traffic, the time spent in the network and the resources visited.
In addition, not so long ago there was an opportunity to modify the Traffic Inspector portal page. The administrator can add to the page 192.168.0.1 : 8081 / portal an advertisement, banner, information about discounts and special offers, or a feedback form for receiving feedback on the quality of service that a cafe or restaurant can be an additional opportunity to promote and increase brand awareness. It is possible to place on this page links to groups and restaurant pages in social networks. The visitor should like the page, be added to the group or check in, after which he gets into the network. Or provide an opportunity for a regular visitor to create a personal page on the site of the institution.
Source: https://habr.com/ru/post/272039/
All Articles