hi, im using mikrotik 3.20 to create a hotspot point.
it worked OK for a couple of weeks,then i got a call from a LAN user (no wifi ,not connected to hotspot box) that, he got a message on his browser, that asks him a username/password. which is hotspot login page.

i guess,a user has a bridge between his wireless and LAN adapter that is probaby windows' sharing internet feature or something like that.

and since mikrotik hotspot is likely doing some arp poisoning (not sure,but i guess that also), the LAN users are spoofed immediately i turn on the mikrotik box. (i had to shut down it on the first call)

how can i fix that ?

thanks

fix what? it's designed behaviour - users access hotspot independently of their network settings

thanks for replies.

no the user is not accidently connected to hotspot.
and it is of course expected, for wifi users to get login pages.

|INTERNET|____|HOTSPOT|~~~~|hotspot user|_______{LAN}_______|LAN GATEWAY|______|INTERNET|

the problem is, LAN users are getting hotspot login page (not connected to hotspot directly)

if that user uses bridge - then LAN users ARE connected to hotspot directly, using bridge =)

if that user uses bridge - then LAN users ARE connected to hotspot directly, using bridge =)

yeah,cant i deny that ? (that is what i mean _to_fix_ in first post.)

so 1 solution left for me.
disable hotspot,and use a basic dhcp server, and mac filtering (instead of giving user/pass to users) via firewall.

if someone from LAN complains, tell him that the reason is that user with bridge - it's not your trouble! why the hell should you answer the malicious actions of other users?

do you think this can happen very often when somebody bridges their cards accidently? I've never heard such issues before

i am not sure of the bridge, but imho, its the only possibility.

if someone from LAN complains, tell him that the reason is that user with bridge - it's not your trouble! why the hell should you answer the malicious actions of other users?

i cant control users to not to make bridges etc. that is right.
but the box that is doing arp spoofing is mine,anyways.

but the box that is doing arp spoofing is mine,anyways.

if somebody has stolen your car and knocked down somebody - it's not your problem again =)

ooooooooops if its really an ARP poisoning (i wish is is not) only GOD can save you. if suffer a lot by this issue and my entire wisp network become a fish market. but i don't know how i came out with it, i remember i disallow all the wlan interface and allow them one by one only after formating the computer and installing a decent anti-virus in each computer.

then only i was able to was able to make my network stable agian

hope this helps

ooooooooops if its really an ARP poisoning (i wish is is not) only GOD can save you. if suffer a lot by this issue and my entire wisp network become a fish market. but i don't know how i came out with it, i remember i disallow all the wlan interface and allow them one by one only after formating the computer and installing a decent anti-virus in each computer.

then only i was able to was able to make my network stable agian

hope this helps

arp spoofing box is not an infected workstation, it is the design of hotspot.