Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a LAN with 6 PCs in my office and one Internet connection. I share this internet connection by Windows VPN service.(using windows 2003 on server)

But I want more control on users bandwith usage, set a maximum amount for they usage , also I can manage that some software such as flash get can be used on other PC,

Would any one suggest me a software or some setting on windows 2003 to do this?


share|improve this question
What type of router are your using ? – JJ01 Jun 22 '09 at 2:02
it's a small network and I just use D-Link switch – Ashian Jun 22 '09 at 5:38
up vote 2 down vote accepted

SQUID won't do bandwidth control, but you can use it to see what users have been downloading and to restrict what they can download. See for my setup guide.

Remember you need to use a group policy to configure Internet Explorer to use SQUID as the proxy server.


To answer Ashian's question (this is a bit long to put in a comment):

local_network.txt contains your local network address. Open a command prompt and type ipconfig. You'll see something like:

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   IPv4 Address. . . . . . . . . . . :
   Subnet Mask . . . . . . . . . . . :
   Default Gateway . . . . . . . . . :

If the subnet mask is (it usually is) then the network address is the IP address with the last number set to zero. So in the example above it would be In that case local_network.txt needs to contain the one line:

The default local_network.txt contains "" as an example and you will almost certainly have to change it to match your network. Remember you need to restart the Squid service after making the change. If it still doesn't work post the ouput you get from ipconfig here.

share|improve this answer
Not if you set up squid as a transparent proxy, and have your DHCP server give it out. – Dentrasi Jun 21 '09 at 8:40
I install squid, from local machin, I can use it , but from LAN pcs , I got this error message 0 TCP_DENIED/403 1385 GET - NONE/- text/html ? how can I fix this, I search on web but I can't find a solution – Ashian Jun 22 '09 at 16:24
Did you use my notes? If so have you edited local_network.txt and what if anything did you do about enabling Windows authentication? – John Rennie Jun 22 '09 at 17:01
yes,I use your note, in local_network.txt I add ( I can't understant this text mean) and also I didnt active windows authentication, must I use AD? – Ashian Jun 23 '09 at 7:16

It depends!

For instance if you want to restrict that one of the machines can only ever use 25% of the bandwidth (or 1Mbps) then checkout the Draytek routers. With these you can allocate bandwidth per physical port - most routers have 4 ports which may be sufficiently granular for what you're doing.

Also if on a budget checkout the DD-WRT firmware for many routers, most notably Linksys and Buffalo.

Lastly if you want to monitor web usage and restrict by user (not just machine!) then checkout MS ISA Server. This can log all traffic in to SQL Server for monitoring as well as limit by time of day etc. You can get MS ISA Server included with Small Business Server which may be appropriate.

With regard to Flash Get, as far as I'm aware that's Firefox only which is going to restrict policy usage. I believe ISA Server can potentially block flash on the way through if that's truly what you want to achieve.

share|improve this answer

try Squid +: free (GNU), lot FAQ and expierenced users in internet -: unix-like style of config

share|improve this answer

Some of the better "business grade" router/firewalls can do this, eg SonicWall, Juniper and Cisco type devices (not sure which does, but some do)

share|improve this answer

Get a cheap cheap sub-$200 computer, put 2 network cards in it and then run one of the open source Firewall distros on it such as SmoothWall, IPCop, Untangle, or any of their variants. This is the easiest way to manage network protocols and control bandwidth. The other suggestions in this thread are more difficult.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.