{"id":2253,"date":"2010-10-18T01:14:57","date_gmt":"2010-10-18T07:14:57","guid":{"rendered":"http:\/\/gregsowell.com\/?p=2253"},"modified":"2010-10-18T07:10:56","modified_gmt":"2010-10-18T13:10:56","slug":"redirect-users-to-a-fake-speed-test-site","status":"publish","type":"post","link":"https:\/\/gregsowell.com\/?p=2253","title":{"rendered":"Redirect Users To A Fake Speed Test Site"},"content":{"rendered":"

\"\"<\/p>\n

For some ISPs, speed test sites can be their best friend. It shows a user that he is reaching his potential speed. For others it’s a nightmare as it gives ammunition for users. While at MUM this year my lunch table was having a friendly discussion about just this. Some suggestions were offered on various things you can do to speed test sites. One person explained how a WISP was blocking every speed test site they could think of, just to keep users from accessing any solid material to complain with. I then suggested that I could make a fake speed test site and redirect all users to that. Everyone had a good laugh, but…I though it would be fun to do it for real, so here it is!<\/p>\n

In a nutshell what happens is this:<\/p>\n

  • The user tries to browse to a webpage that contains the word speedtest or bandwidth test in the url<\/li>\n
  • The server IP gets added to an address list of known speed test servers.<\/li>\n
  • Subsiquent access to these addresses hit a destination nat rule that will shoot them over to our webserver, which happens to be hosting our custom webpage.<\/li>\n
    \"\"
    You average user will believe it...hehehe<\/figcaption><\/figure>\n

    The webpage is just simple HTML, nothing fancy. The speed test is really just an animated GIF file that plays once and proudly displays “Speed is Broadband” hehehehe.<\/p>\n

    \"\"
    Broadband is best band<\/figcaption><\/figure>\n

    If you hit the “run test again” button, it just refreshes the cached page and replays the GIF.<\/p>\n

    The files can be downloaded here:

    \n\n\tSpeedtest-HTML\t(3809 downloads\t)\n<\/a>\n<\/div>\n
    \nYou need to run any webserver that will use this folder at the default page.<\/p>\n

    Here’s the router code to make it happen<\/h2>\n

    Layer 7 match for an URL that contains speedtest or bandwidthtest.<\/strong><\/p>\n

    \/ip firewall layer7-protocol\r\nadd comment="" name=speedtest-url regexp=\\\r\n    "^.*(get|GET).+\/(speed|bandwidth).*test.*\\$"<\/code><\/pre>\n
    Here’s the mangle rule to add the speed test IP to an address list.<\/strong><\/p>\n
    \/ip firewall mangle\r\nadd action=add-dst-to-address-list address-list=speedtest-al \\\r\n    address-list-timeout=0s chain=prerouting comment=\\\r\n    "speedtest mark connection" disabled=no dst-port=80 \\\r\n    layer7-protocol=speedtest-url protocol=tcp<\/code><\/pre>\n
    Here’s the NAT statement to grab the traffic and send it to our webserver.<\/strong>
    \nOur webserver is 1.1.1.1 in this example.<\/p>\n
    \/ip firewall nat\r\nadd action=dst-nat chain=dstnat comment="" disabled=no dst-address-list=\\\r\n    speedtest-al to-addresses=1.1.1.1<\/code><\/pre>\n
    Let me close by saying I’m not advocating you lie to your users, I just did this as a proof of concept.  If you had an actual internal speed test server, this might be just the sort of rule set you are looking for.  The joke has now completed its journey…you can now throw the ring into the lava.<\/p>\n","protected":false},"excerpt":{"rendered":"
    For some ISPs, speed test sites can be their best friend. It shows a user that he is reaching his potential speed. For others\u2026<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[28,6],"tags":[],"class_list":["post-2253","post","type-post","status-publish","format-standard","hentry","category-fun","category-mikrotik"],"_links":{"self":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/2253","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2253"}],"version-history":[{"count":28,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/2253\/revisions"}],"predecessor-version":[{"id":2281,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/2253\/revisions\/2281"}],"wp:attachment":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2253"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2253"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2253"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}