Stop the mikrotik from being sniffed

RouterOS Beginner Basics
1

hi guys…


i have a mikrotik connected to my isp who’s releasing me dhcp… now i don t want my isp to be able to sniff my mikrotik how do i stop the mikrotik from being sniffed i should be the only one to login with the dhcp ip released?

2

I don’t understand the question.

Sniffing is a passive act. If someone can see the traffic, they can sniff it. The only way around that is to not let them see the traffic (impossible if they are the ISP that you need to pass traffic through). Another ‘workaround’ is that there’s often no issue with letting people sniff your traffic as long as it is encrypted.

What exactly are you worried the ISP will do?

3

block the internet link thinking i am sharing their link but if i put it via onther router then they want able to sniff the router if i am right ?

4

also if i had three of these on one pole differnet directors would that make singal drop or interfer with each other http://www.miro.co.za/detail.aspx?pid=269&p=Wireless&sp=Antennas%20-%202.4GHz%20(802.11b/g)&spp=Omni%20Directional

am using the r52hn cards would they able to shoot up to 10kms 360 as i sold my isp of i have 3 omini’s and getting these high powered cards with a 433ah putting a simple link for myself.


please advise before i deploy ?

5

I’m not sure I understand. What do you mean by ‘sniff the router’?

Are you trying to keep the ISP from figuring out that there is more than one computer and possibly even more routers connected behind your router? If so, as long as you source NAT everything to the router’s outside IP address they usually can’t tell. They could possibly look at TTLs to determine that packets entering their network have already traversed hops if you do have routers behind the one facing the ISP, you can reset the TTL back to the maximum like this:

/ip firewall mangle
add chain=postrouting out-interface=NAME_OF_WAN_INTERFACE action=change-ttl new-ttl=set:255

However, generally speaking you shouldn’t be violating the terms of service you agreed to with the ISP. If they forbid reselling services get an ISP that permits you to do so.

6

not reselling it making a link so when i am at office or home i can use it both places then paying the isp twice also did u check out what i am trying to do with 3 12dbi omini anntennas would that cause a interference conflict? and also if i wana cache my browsing do i need a board with a sd slot or can i get a board with a usb slot and hook up a 1tb hdd and then tell the mikrotik winbox to cache everything on the 1tb hdd?

please advise


i will do so… as u said increase the ttl on their side

7

also did u check out what i am trying to do with 3 12dbi omini anntennas would that cause a interference conflict?

I don’t do wireless. You should probably post a different topic because the title of this one has nothing to do with that question

and also if i wana cache my browsing do i need a board with a sd slot or can i get a board with a usb slot and hook up a 1tb hdd and then tell the mikrotik winbox to cache everything on the 1tb hdd?

I don’t know. I don’t use proxies.

8

cool i thught i shuldn t post onther thread might spam the forums but yh umm thts cool man thanks alot

9

It will help you get the right answers if you think about the Question before posting it.

If you have 10 questions, post a separate thread for each one.

You will get more sense out of the Answers if we can read more sense in the Questions.