Community discussions

MikroTik App
 
PaRaN0iD
newbie
Topic Author
Posts: 28
Joined: Sun Jan 08, 2012 7:46 pm

Detect fake pppoe server script

Sun Jan 08, 2012 8:01 pm

hiii guys

some bad guys make fake pppoe server in my wlan to steal clients pppoe passwords
I hope you can help me to write a script for this

first detect the hacker fake server then disconnect it

my simple idea say :

make a pppoe client in my router then make a script which request a pppoe connection
to any new mac access my wlan
if the specific mac give a positive response then of course it is a fake pppoe server !!! bingoo

kick that mac

I appreciate your help

thank you
 
User avatar
nest
Forum Veteran
Forum Veteran
Posts: 823
Joined: Tue Feb 27, 2007 1:52 am
Location: UK
Contact:

Re: Detect fake pppoe server script

Sun Jan 08, 2012 9:31 pm

How was a client on your AP able to communicate with other clients on your AP? Was 'Default Forward' disabled or enabled? You should also be using WPA AES encryption on all your APs to stop rogue users from setting up their own AP with the same SSID as you and thus easily take all your customers for long enough to capture their usernames and passwords!

To make it really secure you might need to create IP firewall filter rules to drop all PPPoE traffic between wlan clients and only allow PPPoE traffic between the wlan and ether ports.

By making the network secure, you don't need a script to ban anyone. Just block them from doing it in the first place? :-)
 
PaRaN0iD
newbie
Topic Author
Posts: 28
Joined: Sun Jan 08, 2012 7:46 pm

Re: Detect fake pppoe server script

Sun Jan 08, 2012 9:48 pm

Thank you very much

intersting informations

how to make this pactically

"To make it really secure you might need to create IP firewall filter rules to drop all PPPoE traffic between wlan clients and only allow PPPoE traffic between the wlan and ether ports."

and just for interst how to make the script i mentioned earlier
 
User avatar
nest
Forum Veteran
Forum Veteran
Posts: 823
Joined: Tue Feb 27, 2007 1:52 am
Location: UK
Contact:

Re: Detect fake pppoe server script

Sun Jan 08, 2012 10:53 pm

how to make this pactically
"To make it really secure you might need to create IP firewall filter rules to drop all PPPoE traffic between wlan clients and only allow PPPoE traffic between the wlan and ether ports."
I have never done this on a Mikrotik, but if you google, you will find the solution for a Ubiquiti iptables firewall rule that may point you in the right direction? If you create a set of rules that works, please add them here so everyone benefits? :-)
and just for interst how to make the script i mentioned earlier
Sorry. Can't help you there.