Hello
any one have idea how can I block internet sharing from server router board Mikrotik
when I searching for this problem I read some lovers of mikrotik tell to (change TTL to 1)
but I don’t have idea for this , I tried in mangle add(chain prerouting and action change TTL but I don’t now what I choose in this action change , increment , decrement
I need to block any program how can sharing internet for example connectify hotspot plz (very important)
Thank you
You set TTL to 1 for packets going from your router to client. The idea is that if client connects another router to share the connection, packets’ TTL will expire (it decreases by 1 with each hop) while going through their router and those packets will be dropped. So devices connected behind that router won’t be able to establish any connection.
What will happen in reality, is that client will increase the TTL on their router, exactly the same way as you decreased it in yours and sharing will work just one. So it’s mostly waste of time, you’ll stop only few newbies by this.
Thanks for replay
Plz write your idea for code
Where i add rule, in mangal or where..
If in mangal..
Chain?
Action?
And what i write in that action..
Thank you
You can try e.g.:
/ip firewall mangle
add chain=postrouting action=change-ttl new-ttl=set:1 out-interface=<to-client>
Or you can do the same in forward chain, use dst-address= instead of out-interface, etc…
And as I wrote, client will then do this on their router:
/ip firewall mangle
add chain=prerouting action=change-ttl new-ttl=increment:1 in-interface=<WAN>
And your effort will be useless. Or they can use a proxy (web, SOCKS) on directly connected PC. Simply put, if they want to share the connection, they will.
You are buying and selling connectivity. If you can do this, why your clients shouldn’t? Think how to compete by better service and quality and not by blocking something that you technically can’t.