How to prevent hotspot shield

Dear Sir’s

My users uses anchorfree software, so they can overcomes any rules
on mikrotik.

Did any ine know how to stop this software.

“hotspot shield - http://anchorfree.com
I thing it uses port “172.0.0.1:895”
Please help

Amagd

if you use “Hotspot” in RouterOS, this thing will not work. User will always need to authenticate first. That program is just a simple VPN tool, make rules based on IP and they will not overcome them

I am not using “Hotspot” in RouterOS, but I use only webproxy rules.

Please give me an example rule based on IP to overcome them.


thanks
amgad

you can’t do that. if the person is running a VPN tunnel to somewhere, you can’t know what he does with his traffic

Sir

I wonder is there is some way to stop vpn tunnel.

I have to stop vpn tunnel by anyway to hotspot servers.

Amgad

use Mikrotik Hotspot

Dear Sir
I mean by “hotspot shield” a comany site with this name.

how to stop it from microtik hotspot I never use it before.

amgad

I know what you mean. Their name is confusing because it’s not related to any hotspots.

Full sentence “To block Hotspot Shield program, make your customers use MikroTik Hotspot Gateway. Only after authentication they will be able to use the internet, and Hotspot Shield will not work unless your user has logged in”

However, once the user has logged in, he is free to run this shield program, and overcome any proxy access list rules. This is because he is no longer getting those pages from your proxy, but from somewhere else, through an encrypted tunnel.

In this case you don’t care anymore what your user is doing, because they don’t use your proxy. If you want to limit them somehow, you can only limit their speed.