How To Block, once NAT-ed packets

RouterOS General
1

Hello,

I Want to block the packets (connections ) which have already been NAT-ed. (Say, Do not Allow User to share his internet, via windows, or some router)

I’ll be glad To see a nice answer.

I’m using ROS 3.30 version.

Thanks waiting for your reply

2

Manually set the TTL to 1 for everything you send to the client. That’s supported in the firewall mangle facilities.

3

or

/ip fi fi add chain=forward in-interface=Local ttl=equal:127 action=drop/reject
4

And the client will also buy MikroTik device for his gateway and use:

/ip firewall mangle add action=change-ttl chain=prerouting in-interface=WAN new-ttl=increment:1
/ip firewall mangle add action=change-ttl chain=postrouting out-interface=WAN new-ttl=increment:1

:wink: