How can drop netcut

[loveman]

Hello
How can drop netcut program
Please anyone know how to block netcut.
Regards

[loveman]

No answer

[sup5]

You cannot simply ‘drop’ it.

Bussiness class ethernet switches support a feature called Dynamic ARP Inspection,
but it only works with dynamically assigned IP addresses (DHCP).

Mikrotik doesn’t offer DAI.
But if a direct communication between the clients isn’t necessary and
all adresses are assigned via DHCP
you can use these Mikrotik features to get rid of NetCut etc.:

1. use Port Isolation (this is called horizon bridging in RouterOS)
   → This avoids uses see broadcast-Frames and eventually MAC-Addreses from other uses

2. use “arp reply only” on your Default-Gateway IP-Interface
   along with “Add ARP FOR Leases” on your Default Gateway’s DHCP Server.
   → This avoids the default gateway to learn fraud ARPs

[loveman]

@sup5

You cannot simply ‘drop’ it.

Bussiness class ethernet switches support a feature called Dynamic ARP Inspection,
but it only works with dynamically assigned IP addresses (DHCP).

Mikrotik doesn’t offer DAI.
But if a direct communication between the clients isn’t necessary and
all adresses are assigned via DHCP
you can use these Mikrotik features to get rid of NetCut etc.:

1. use Port Isolation (this is called horizon bridging in RouterOS)
   → This avoids uses see broadcast-Frames and eventually MAC-Addreses from other uses

2. use “arp reply only” on your Default-Gateway IP-Interface
   along with “Add ARP FOR Leases” on your Default Gateway’s DHCP Server.
   → This avoids the default gateway to learn fraud ARPs

thank you

[nxs02]

and also u need forwarding option to disable in wireless interface