Problem with illicit share of internet

Hi everyone. I have one RB750 and x86 machine with RouterOS with the same need and both of them work perfect for me. More information - Internet provider via ADSL 20Mbit (pppoe client), PPPoE Server and PPTP Server, 15 clients. But I noticed one upsetting detail,if client get IP from DHCP or manually with setting Mikrotik gateway, he has internet without PPPoE or VPN connection even. I tried to find solution on web,but while nothing. Any suppositions about?