Dear all,
Hope you will be fine. I need your help
I’m running hotspot server. But I don’t know…! peoples are sharing my internet with WiFi Scanning. how I can stop users from sharing my hotspot.
Now, in modern mobile phones, there are two wireless cards. The user connects one of them to the hotspot network and shares it with his friends via the second card.
How do I stop this process on my Mikrotik router?
Thanks & Regards
You cannot prevent that.
The way to sort of discourage it, is to use a mangle rule to set IP TTL to 1 on all packets sent to the wlan.
Raise prices for the lost revenue.
@ essam,
peoples are sharing my internet with WiFi Scanning. how I can stop users from sharing my hotspot.
maybe some basic approach? 
- don’t broadcast your wifi ssid.
- macaddress filters. need to register their macaddr before making the connection.
- userman. radius.
etc..
hope this helps.
All of that will not help against the scenario he describes…
You have to decide, what is the user paying for. Only for internet access? In this case, he can do whatever he likes. He paid for it.
- Make rules. If user breaks rules, impose fines
- Say that the payment is for a certain speed. Then you can Put speed limit per user. They will not be happy to share bandwidth between many people, so they will have reason to pay for more than one login
@ pe1chl,
are you sure about that?
wpa2/3 etc don’t work any longer?
hmm, what does @op role anyway? internet cafe or something else?
Setting the TTL to 1 on the postrouting of you wifi interface using a mangle rule will make sure that no device connected there can work as a router.
I just use a simple MikroTik router and set up two wifi profile. One connects to the hotspot, the other is behind NAT and share out the Hotspot network. As long as one user do log inn to the Hotspot, you can then connect as many user you like to the NAT router and Hotspott sees them all as one IP/MAC. That is not easy to prevent.
See this post:
http://forum.mikrotik.com/t/caravan-wifi/122744/1
Since “you”() have the bad habit to not understanding that in the same forum where you ask for a solution to block someone,
there is also someone asking how to get around it, it is obvious that it will be impossible for you to limit any type of sharing,
if the user is really intentionated will share, whether you like it or not.
() Generic user of the forum who doesn’t use the search where he finds dozens of other identical topics for the same thing and with the same answers.
You do not understand the matter. If you carefully read the question you would understand that authentication cannot resolve this.
hmm, what does @op role anyway? internet cafe or something else? >
As usual, you ask for irrelevant details. You are the type of person that answers a question with “why would you want do do that”.
This is useless.
As I already wrote above. But note that this is not guaranteed to work, as the phone may ignore TTL or increase it to circumvent this.
How much security… It’s obvious that you don’t know what you’re talking about…
As a regular user I’m here to obtain the opposite of the OP’s question. It’s irritating that this particular person whose wifi am on capped hotspot to 1mbps downlink. Who does that? As a paycheck I successfully use my Ubuntu to clone MAC addresses and use Warp to amplify my Internet experience. The issue is I was able to change pre-route. I don’t know if am supposed to be pre-routing mangle or post-routing instead because I have the Mikrotik to connect to the nasty hotspot and I want to push to my Dlink, but since he capped it I decided I’ll utilize the bypass to have Mikrotik supply my Smart TV only as that seems to load my Netflix and Youtube fine.
I just need to bypass this people, for now it’s a win-win with my cloning MACs. I just need to go extra winwin-win with my Mikrotik so I can leave the cloning of his client’s MAC addresses in peace. It’s irritating either way but I feel it’s worth it when you cap users on 1mbps and still disable tethering.
My tries didn’t produce any positive result with the mangele