Is mikrotik usermanager protected from Wi-Free ( a service which routes traffic through dns and icmp protocol ) ?
That’s clever technique used first by some of the spyware. To block you can use the firewall:
Use content filter and filter out ICMP traffic with anything else than standard payload
Use rule that limits the size of the ICMP packets
Use DNS redirection to redirect DNS traffic to google or openDNS servers only
Rate limit DNS and ICMP traffic
The hotspot block icmp traffic automatically with the basic router protect rules specified in the protec t your router.
Does the software clone mac or ip of other systems that have access? If it does, usermanager may be vulunerable.