Community discussions

 
LEM1S
just joined
Topic Author
Posts: 6
Joined: Mon Mar 12, 2018 7:35 am

Help Hacker sending deauth packet

Wed Feb 13, 2019 10:21 pm

Hi guys!
Please,i really need your help.I live in Cuba,and here we acces to internet through a public wifi with a captive portal.Problem is that seems that somebody is sending a deauth packet to all users connected to this network that are using Mikrotik(I say this,because it doesnt affect to any phone and AirOS clients).This is the error:
Image

Btw its happening 2 days ago.
 
User avatar
vecernik87
Long time Member
Long time Member
Posts: 585
Joined: Fri Nov 10, 2017 8:19 am

Re: Help Hacker sending deauth packet

Thu Feb 14, 2019 4:57 am

I guess you are looking for this: https://wiki.mikrotik.com/wiki/Manual:I ... protection
However, I am not certain whether it will help since it is proprietary algorithm and is supported only by RouterOS devices. (To work, it must be supported by both AP and Client)
Unfortunately, as far as I know, there is no support of 802.11w (standartized management frame protection) in RouterOS...
In the end, I am afraid that reply on following page is very true - there is not much protection in general: https://security.stackexchange.com/ques ... on-attacks
 
whatever
Frequent Visitor
Frequent Visitor
Posts: 85
Joined: Thu Jun 21, 2018 9:29 pm

Re: Help Hacker sending deauth packet

Thu Feb 14, 2019 8:40 am

Did you try to change your MAC address to something that doesn't look like mikrotik? Like use your phone mac and increment the last byte?
 
TimurA
newbie
Posts: 46
Joined: Sat Dec 15, 2018 6:13 am
Location: Tashkent
Contact:

Re: Help Hacker sending deauth packet

Thu Feb 14, 2019 9:01 am

Either wait for Mikrotik to do 802.11w (doubtful), or lift the second point and configure Capsman for roaming. And translate the network name of the SSID to Unicode - utf8.
Image
 
R1CH
Forum Veteran
Forum Veteran
Posts: 842
Joined: Sun Oct 01, 2006 11:44 pm

Re: Help Hacker sending deauth packet

Thu Feb 14, 2019 7:18 pm

These are often accidental, where someone configures an enterprise AP with "rogue AP mitigation" or a similar setting. Check with any businesses nearby or see if a wireless scan picks out any obvious enterprise APs that might be the culprits.
 
LEM1S
just joined
Topic Author
Posts: 6
Joined: Mon Mar 12, 2018 7:35 am

Re: Help Hacker sending deauth packet

Thu Feb 14, 2019 9:35 pm

I guess you are looking for this: https://wiki.mikrotik.com/wiki/Manual:I ... protection
However, I am not certain whether it will help since it is proprietary algorithm and is supported only by RouterOS devices. (To work, it must be supported by both AP and Client)
Unfortunately, as far as I know, there is no support of 802.11w (standartized management frame protection) in RouterOS...
In the end, I am afraid that reply on following page is very true - there is not much protection in general: https://security.stackexchange.com/ques ... on-attacks
Problem is that this Acces Point,doesnt support Management frame protection,i mean,i set "requiered" on my Mikrotik,and it doesnt connect to te AP,i can set allow,but anyway,it doesnt make any difference.
Thanks for helping.
 
LEM1S
just joined
Topic Author
Posts: 6
Joined: Mon Mar 12, 2018 7:35 am

Re: Help Hacker sending deauth packet

Thu Feb 14, 2019 9:37 pm

Did you try to change your MAC address to something that doesn't look like mikrotik? Like use your phone mac and increment the last byte?
Yh,i have changed the mac address like 100 times(literally),i tried android phone's mac,nanostation,etc.

Who is online

Users browsing this forum: No registered users and 2 guests