How to stop sharing internet connection with "baidu"

RouterOS General
1

Hello everyone,
I need to block program that working with windows 7, 8
The program name “baidu wifi hotspot”
how can block by mikrotik
I used method to change the TTL to 1
but program can working without any block and since that my mikrotik version 6.45.1,
Used PPP, PPPOE Server in my network.
Any help or advice to block the program bz all user can share the internet connection through the progrom baidu and can connecting mobile?
Thanks

2

Will be difficult, if not impossible.

  1. As this is an application, you should talk to the system guys. It is not the “task” of the network-guy to plug the holes caused by mis-managed desktop systems! Being able to install this software so your PC performs ICS (Internet Sharing Connection) should be blocked at systems level.

  2. This application will act as hotspot so the traffic you see arriving on Mikrotik is both from the PC and NAT’ted wireless users (with the same IP as the PC)

  3. No way to “distinguish” between “hotspot users” going through that PC and any person sitting behind the PC with “Baidu” installed. (same IP, same MAC)

3

Thank you for your replay,
In my new position “new place of work” don’t have windows server domain or like any of controller so in this time i tested to block or any like this to drop the program “baidu” but i cant so old version of mikrotik when applied the mangle rule to chane the TTL To 1 the share internet connection stopped so the program “baidu wifi hotspot” not work but last 6 month when company of mikrotik upgrade the version of mikrotik the TTL when =1 not running with stop share internet connection so the “baidu” working wthout any problem!
I posted here bz i need any one advice me how to block the program with new method ?

4

I understand about TTL=1 mangle, but how do you IDENTIFY “Baidu” users making use of this app ? You have all sorts of traffic wanting to go out to Internet ?
There is also regular WIRED users/PC’s right ?

5

I see the coincidence of times by connecting a laptop to my network or there are problems at some time!
Yes i have also regular WIRED users/PC’s used in my networks. so the big problem when users use share internet connection “baidu”.

6

This kind of policy control cannot be handled at network layer anymore. As I see it , you will never be able to tell who coming in through “Baidu” “wireless AP” app and who is a regular wireless/wired user on you network.

You will have to think about some PROXY system granting access to Internet for AUTHENTICATED users.

7

Options:
a. Provide separate internet access - because there seems to be a requirement or need for this, and for it not to interrupt or be mixed up with WORK internet/network.
b. IF another internet access is not possible
(i) Provide a warning that use of illegal internet/wifi on business network is grounds for being fired
(ii) Fire an employee to ensure that the rules are clearly understood and that they are being enforced.

8

Your words are credible, I tested using in Group policy with laptop to drop app but not worked correctly.
I will search with more than way to drop it.

9

I’ve already warned employees, but such hidden programs are used and are monitored.
I will search to method to block by group policy windows in any laptop have this program .