Every MikroTik 3.6 hotspot is creating a lot of connections to port 80, somewhere on Internet and with different IP address. I’m using hotspots to let users in. On all 2.9 versions access point doesn’t crating any connections. Does anyone know why is it?
Are you seeing these connections in torch? If so, see my post from yesterday.
No, I can’t see this connections on tourch. I see it in /ip firewall connection list and on MT which is Internet gateway. On Internet gateway I can see those connections on torch and in ip firewall connection. A lots of connections from 3.6 MT hotspots to different IP addresses and all to port 80. They are making a lots of traffic to Internet.
Anyone…?
Hello frens,
yes,. . . . . .
maybe some viruses infacted to it user.
last time ago i had local traffics until 115Mbps total with variation of ip addresses on port=80
they will makes dynamical addresses by itself.
That’s mean like spider networks line. also your CPU & RAM router eat by them. oh . . . my GOD 
regards
Hasbullah.com
Khm… I hope it isn’t something like that. I have 200 users on that hotspot. I can’t go to all of them and check their computers. But why this is happening only on 3.6 versions, not on 2.9.x? I didn’t noticed that one earlier version of version 3.x.
This is what I ment… 10.10.1.1 is address of hotspot interface. It’s running on 3.6 version of MT.
Hai Fren,
Oh . . . i saw your screen report, 
i am sure your client [10.10.1.1] has many online applications or some viruses, but they are still logout. you can check when it user login in that’s dymanical address should be decrease on connection-trackking list.
Tips:
- Don’t make rules drops, cause it will makes dinamical address by addresses itself on port=80
- Check user under it address[10.10.1.1]
regards
Hasbullah.com
maybe you have transparent proxy enabled and that if why you see only one src addres…In v2.9 you had the same setup?