Community discussions

MikroTik App
 
miankamran7100
Member Candidate
Member Candidate
Topic Author
Posts: 251
Joined: Tue Sep 17, 2019 9:28 am

how I can stop users from sharing my hotspot

Sun Oct 09, 2022 8:18 pm

Dear all,
Hope you will be fine. I need your help
I'm running hotspot server. But I don't know....! peoples are sharing my internet with WiFi Scanning. how I can stop users from sharing my hotspot.
Thanks & Regards
 
User avatar
BartoszP
Forum Guru
Forum Guru
Posts: 2865
Joined: Mon Jun 16, 2014 1:13 pm
Location: Poland

Re: User Hack MikroTik Hotspot

Sun Oct 09, 2022 8:53 pm

Limit access only to known MAC addresses.
 
miankamran7100
Member Candidate
Member Candidate
Topic Author
Posts: 251
Joined: Tue Sep 17, 2019 9:28 am

Re: User Hack MikroTik Hotspot

Sun Oct 09, 2022 8:57 pm

I make static in DHCP and bypass in hotspot IP binding with mac address so user can directly connect with wifi without login page. but mac binding not working
 
User avatar
rumahnetmks
Frequent Visitor
Frequent Visitor
Posts: 56
Joined: Mon Dec 21, 2020 10:00 am

Re: User Hack MikroTik Hotspot

Mon Oct 10, 2022 8:14 am

If u use non mikrotik for ur AP :
Mikrotik router set to :
* DHCP add arp for leases, use static pool.
* DHCP setting use Radius Yes
* Setting ur RADIUS (DHCP and Hotspot tick) and sett all other things necessary
* Setting lease static DHCP for all your device.
* Setting IP Binding Hotspot Bypass for all your device.
Addition IF u use mikrotik AP :
* Consider to add ACCEPT all ur device within Access List, else REJECT...
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 3292
Joined: Sat Dec 24, 2016 11:17 am
Location: Magrathean

Re: User Hack MikroTik Hotspot

Mon Oct 10, 2022 9:01 am

Using only one mac does not help. Its easy to setup an Mikrotik with wifi to wifi and NAT. This way hotspot only see one mac and after the first PC behind nat authenticate, all client behind the nat will be accepted.
Example setup
viewtopic.php?t=138480
 
AidanAus
Member Candidate
Member Candidate
Posts: 177
Joined: Wed May 08, 2019 7:35 am
Location: Australia
Contact:

Re: User Hack MikroTik Hotspot

Tue Oct 11, 2022 8:14 am

I think the hotspot server is a good thought, but that would mean that you are still giving the devices accesses as you need to connect to the wireless interface allowing at a minimum layer 2 access into the device so make sure you put the wireless interface in a bridge and use bridge filters with this (i.e at least a drop on the input chain going into the router) as well as this you would want to disable default forwarding. Disabling this will prevent unwanted devices form talking with other devices connected to the WIFI but it will also stop your devices as well, that means if you have a smart TV connected to the same wireless as your phone you will not be able to cast to it etc.

I think the best option would be setting up radius authentication to the wireless interface its self, there are a few guides out there on how to set this up on the mikrotik as well as you can set up something like free radius quite quickly for something like this that doesn't need any accounting etc just authorisation :)
 
miankamran7100
Member Candidate
Member Candidate
Topic Author
Posts: 251
Joined: Tue Sep 17, 2019 9:28 am

Re: User Hack MikroTik Hotspot

Tue Oct 11, 2022 8:49 am

Dear all,

why we use TTL?
https://www.youtube.com/watch?v=nYLVQcNEHk0
can we stop this with
Thanks
 
User avatar
rumahnetmks
Frequent Visitor
Frequent Visitor
Posts: 56
Joined: Mon Dec 21, 2020 10:00 am

Re: User Hack MikroTik Hotspot

Tue Oct 11, 2022 3:39 pm

Even if you use TTL=1, are you realize your user can do the same?
Some app can bypass this, have tested before.
Try using bandwith limitation or volume limitation. Even your customer share their connection, they cant bypass bandwith limitation or volume limitation...

Forgive me for my noobness
Note: Edited. Ty
Last edited by rumahnetmks on Mon Oct 24, 2022 9:01 am, edited 1 time in total.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11982
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: User Hack MikroTik Hotspot

Fri Oct 14, 2022 2:08 am

Even if u use TTL=1, r u realize ur user can do the same?
Please, this is not the first time I have asked you,
stop writing like this, it is not understandable to everyone.
 
miankamran7100
Member Candidate
Member Candidate
Topic Author
Posts: 251
Joined: Tue Sep 17, 2019 9:28 am

Re: User Hack MikroTik Hotspot

Fri Oct 14, 2022 5:08 am

Dear all,
If you have solution please mentioned. If not please don't write
Thanks:)
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11982
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: User Hack MikroTik Hotspot

Fri Oct 14, 2022 7:07 am

The solution is: YOU CAN'T.
 
miankamran7100
Member Candidate
Member Candidate
Topic Author
Posts: 251
Joined: Tue Sep 17, 2019 9:28 am

Re: User Hack MikroTik Hotspot

Sun Oct 16, 2022 5:15 am

The solution is: YOU CAN'T.
We can done it with MikroTik or not?
Last edited by miankamran7100 on Sun Oct 16, 2022 7:51 am, edited 1 time in total.
 
User avatar
Buckeye
Forum Veteran
Forum Veteran
Posts: 890
Joined: Tue Sep 11, 2018 2:03 am
Location: Ohio, USA

Re: how I can stop users from sharing my hotspot

Sun Oct 16, 2022 6:02 am

The solution is: YOU CAN'T.
We can done it with MikroTik or not?
Evidently you don't understand. Your question is similar to "Can DRM prevent someone from copying a DVD?"

Watch this. And pay attention here.
 
miankamran7100
Member Candidate
Member Candidate
Topic Author
Posts: 251
Joined: Tue Sep 17, 2019 9:28 am

Re: how I can stop users from sharing my hotspot

Sun Oct 16, 2022 7:54 am

moderator note: do not quote preceding post. Use "Post Reply".
Dear Buckeye
Thanks alot for your reply. I will see this
but I want to tells you I have various vendour router for hotspot Unifi, Cisco, Linksys, Dlink which are behind the mikrotik. (on these routers dhcp is disable and just working as Access point)
So tell me is it possible to control sharing hotspot user?
 
User avatar
BartoszP
Forum Guru
Forum Guru
Posts: 2865
Joined: Mon Jun 16, 2014 1:13 pm
Location: Poland

Re: how I can stop users from sharing my hotspot

Sun Oct 16, 2022 10:08 am

Please decide what you operate?

1. Hotspot created and fully managed in Mikrotik with mikrotik APs
2. Hotspot created with 9 UniFi APs with Mikrotik as a router
3. Mix of different vendors' APs providing WiFi and configured locally as "desert islands".

Draw you network diagram and define what you mean writing "using hotspot".
Does it mean that you want do block rights to see WiFi network, connect to WiFi SSID or just block traffic to/from internet despite the method/AP the user connects to?
How to you imagine managing eg. TP-Link AP with Mikrotik if TP-Link does not understand "the language of Mikrotik" and is designed to be "selfoperating home WiFi ecosystem"?
 
User avatar
Buckeye
Forum Veteran
Forum Veteran
Posts: 890
Joined: Tue Sep 11, 2018 2:03 am
Location: Ohio, USA

Re: how I can stop users from sharing my hotspot

Sun Oct 16, 2022 10:18 am

@miankamran7100 I think either there is a language barrier, or you do not have the technical background to understand the problem. You can stop the casual users, but not the determined ones.

If it is a language barrier, then put the text from the following thread into a language translator like translate.google.com or deepl.com

viewtopic.php?t=101096 and specifically post #4 by Sob

Edit: And now I expect that @BartoszP will complain that I didn't quote the post I was referring to. This is one reason for quoting posts, because sometimes (like in this case) a new post comes in while you are entering your post.
Last edited by Buckeye on Mon Oct 17, 2022 4:59 am, edited 1 time in total.
 
User avatar
BartoszP
Forum Guru
Forum Guru
Posts: 2865
Joined: Mon Jun 16, 2014 1:13 pm
Location: Poland

Re: how I can stop users from sharing my hotspot

Sun Oct 16, 2022 11:18 am

AFAIK BartoszP complains when whole preceding posts are unnecessarily quoted to be commented. It's is like a discussion when someone repeats whole preceding or even "grand-preceding or grand-grand-preceding" sentence of interlocutor just to comment it or even without need. :)
 
User avatar
Buckeye
Forum Veteran
Forum Veteran
Posts: 890
Joined: Tue Sep 11, 2018 2:03 am
Location: Ohio, USA

Re: how I can stop users from sharing my hotspot

Sun Oct 16, 2022 11:58 am

@BartoszP I know I have had some of my post edited that were not quotes of a complete post, I do prune text from a post I quote, at least that is my intention, although sometimes I may make a mistake and post without previewing with the complete text of the quoted post, but when I do I try to come back and prune after the fact.

I agree that there it too much quoting of whole long posts without any "pruning" done, often with long sections of a config export that wasn't in a code block, and that is just a waste of screen space and doesn't add anything to the discussion. However, selective quoting can set the context for a comment and make it less likely the comment will be misinterpreted. Just because there is no quote does not imply that a post refers to the immediately preceding post. It's too bad that phpbb doesn't offer a "add reference post" that would just provide a link and possibly the name of the post was a response to.

I just thought it was ironic that when I didn't quote, you had posted in between, and that my post, as it was originally posted without even a reference to @miankamran7100, it would have been read as a comment I was making regarding your post, not miankamran7100's post. The comment was generic enough that it could have been misinterpreted. :wink:

I do realize you didn't edit my post this this thread. I think there are cases where quoting does add to the discussion.
Last edited by Buckeye on Sat Nov 05, 2022 10:25 pm, edited 2 times in total.
 
User avatar
BartoszP
Forum Guru
Forum Guru
Posts: 2865
Joined: Mon Jun 16, 2014 1:13 pm
Location: Poland

Re: how I can stop users from sharing my hotspot

Sun Oct 16, 2022 12:01 pm

I just thought it was irornic ...
So did I ... that is why I wrote about me in the third person :)

Who is online

Users browsing this forum: DanMos79, hatred, holvoetn, syahpian, ywlhlp and 37 guests