to prevent hotspot hacking use a wireless interface in the MT and uncheck the default forward in the wireless interface configuration this will prevent client to communicate with each other I found that this still allows users to e.a. 'ping' each other thru the MT as a relay. I use additionally a f...