Security Hotspot Routing Question.

Hello everyone,

I have an issue, I am setting up a Hotspot in a neighborhood, I am using Mikrotik as my controller as always, and other radios and antennas for this project. I will sale prepaid 24H voucher to residents of this neighborhood. Mostly will be mobile connections.

My issue is that I have been getting information that some people are thinking of connecting a computer to the wifi, buy just one prepaid card a share the internet connection with other people once they login.
I have heard that with the correct rules this can be stopped through routing. Can anyone guide me to the right direction on this.

Thanks

/ip firewall mangle
add action=change-ttl chain=forward new-ttl=set:1 out-interface=<LAN INTERFACE> passthrough=no

Use this rule, or something like it, to change the TTL of packets down to one. What will happen is when a router connected to the LAN of the network receives the packet and forwards it, it will set the TTL down to 0, and drop the packet, never forwarding it on.

This doesn’t mean that without the right software on their router they cannot readjust it, but it should prevent the casual user from doing so.

As simply you can set lower ttl, they can set it higher. So, if they are at least smart as you, you cannot do anything against.