Dear All
Kindly guide me through this scenario
How do i block the use of router to illegally retransmit my network
Here i have noticed some customers use routers one end connected to my network and using it as a router the enable DHCP thereby having access through my link to their place
I will prefer it if i can control this
Thank you
fewi
June 13, 2011, 3:47pm
2
Set the TTL of packets going into the customer network to 1 in mangle postrouting.
/ip firewall mangle add chain=postrouting out-interface=toCustomer action=change-ttl new-ttl=set:1
Thanks alot
will try and get back to you soon
Please one quick question
After i apply the mangle settings and i want to give access to subcribers who paid for acces for 2-3 computer
What would you suggest
Thanks alot
fewi
June 13, 2011, 9:19pm
5
Make an address list that contains the IPs that can be assigned to routers:
/ip firewall address-list
add list=routersOK address=10.0.0.30
add list=routersOK address=10.0.0.50
Then change the TTL rule to not apply the new TTL to IPs on that address list:
/ip firewall mangle add chain=postrouting out-interface=toCustomer dst-address-list=!routersOK action=change-ttl new-ttl=set:1