normis wrote:probably because your firewall needs to be configured.
1. Make firewall rules to drop ICMP unless you really need it (then make it available only for certain hosts)
2. Make static ARP entries with arp=reply-only
ahmedsaffar76 wrote:Hi ;
I think that using pppoe will help you alot with the netcut program .
when you use pppoe server you will define two pools , one for the server ip's and the second pool for the clients .
so every client will get automatically two ip's one for the server ip and the other for the client ip .
so any client will use netcut will only see himself and the server ip only and will not see any other client to cut him from the network .
i am using this .
Norims , could you explain the ARP more . when i put them reply-only the internet stopped and i think i made a mistake with it .
waiting your feedback .
with best regards .
normis wrote:quick example:
/ip firewall filter chain=input protocol=icmp action=drop
/interface ethernet set ether1 arp=reply-only
/ip arp add address=126.96.36.199 mac-address=FF:FF:FF:FF:FF:FF interface=ether1
actually you can drop all traffic in input chain, except your personal IP. better yet - find out who violates the internet usage policy and disconnect him from internet.
Users browsing this forum: No registered users and 2 guests