Firewall

For Internet access control there is firewall built in client part. It can allow/disable access to specified ports or IP addresses, depending on current tariff.

Be careful, configuring firewall! You can disable the connection between client and server parts of ClubControl. By default, enable port 7699 to avoid ClubControl blocking.
When configuring firewall, there are several tariffs in TARIFF window. Program gets them from your price, so before configuring firewall – configure your price.
One of them is system tariff – LOCKED. It works, when program need to disconnect internet, so usual setting for it is to allow only local network addresses and disable all other addresses or ports.
When client session starts, for example with GAME tariff – GAME firewall settings are loaded. Firewall settings with same tariff name are always loaded, when client session starts.

In build in firewall allowed addresses and ports have higher priority, then restricted ports and addresses have. ALLOW ALL OTHER setting affects only on addresses and ports, which are not included in allowed or restricted settings.

Build in firewall can block only TCP traffic. After ClubControl purchasing you can download external firewall, which blocks both TCP and UDP traffic. It works in windows 2000 and XP SP1. You can download it from our site, www.vaosoft.com in Download menu.

Usual settings for local network 192.168.XXX.XXX and two tariffs GAME and INTERNET are:

LOCKED

[Restricted Addresses]
0.0.0.0-255.255.255.255
[Restricted Ports]
0-65535
[Allowed Addresses]
192.168.0.1-192.168.0.100
[Allowed Ports]
7699-7699
139-139
[All Other]
Allow=0

INTERNET

[Restricted Addresses]
nothing
[Restricted Ports]
nothing
[Allowed Addresses]
0.0.0.0-255.255.255.255
[Allowed Ports]
0-65535
[All Other]
Allow=1

GAME

[Restricted Addresses]
0.0.0.0-255.255.255.255
[Restricted Ports]
0-65535
[Allowed Addresses]
192.168.0.1-192.168.0.100
[Allowed Ports]
7699-7699
139-139
[All Other]
Allow=0

NOTE, firewall can only block traffic. For traffic calculation you have to set up sniffer, or build in proxy. .