Good day everyone!

Long time I don't post for help in forums; I would like to know if someone faced this problem or have any clue about what is wrong.
We have RB433 and RB450G boards, tried with RouterOS 5.22, 5.26 and 6.7 right now. One network adapter is connected to the Internet, and all the others are in bridge mode, running a HotSpot in the bridge. Well, one of our customers asked us to bypass the remote requests that their Android application does, so everyone can only use the app, without need to log-in the hotspot.
in IP > HotSpot > Walled Garden IP List, added the domain in Dst. Host and Action accept. The app connects and works perfectly, even if the user did not log-in the hotspot.

Well, the problem is: All logged-in users, when the admin sends a Push notification to everyone, they receive it, but the users that did not log-in, they don't receive it until they switch to mobile data or log-in the hotspot network. We used a sniffer, to see all the IP adresses or domains that our customer's app use, to see if we find more, but no luck.
Did we miss something, it's a bug in ROS or do we need to change something else in HostSpot config to allow push notifications?

Best regards!

I think the problem is that the mobiles are not loged in to the hotspot before the push notification and the hotspot don't know that them has arrived to the office ; )


Imagine you arrive to the MUM and they are giving a free beer to everyone in the list of "arrived to MUM today". If noone knows that you arrived, you wont get your free beer. It's same situation, your hotspot don't know that your mobiles are "in the office" because this mobiles don't tried to get internet through the hotspot.

In a 3G network the mobile is always sending ACK packets and always are "validated" in the "hotspot" of the 3G company.

Hello Ibersystems, thanks for your reply.

I searched more information about push notifications, and if I'm not wrong, seems that the app establishes a persistent connection to a server, and waits to receive the push data. Do you know if ROS's hotspot allow persistent connections no unauth users, but having allowed the domain to connect in Walled Garden IP List?

Also, we found a rule (IP > Firewall), that is being added automatically when you set up the hotspot, to block 8080 port, to unauth users. Our customer's app does the request on a 8080 port; and we can't change this port (it's grayed in winbox), as well we can't ask our customer to change the port in their app. Do you know if there is a way to allow connections to 8080 port?

Thanks in advance~

I don't know if this will work for you, but it looks like I can disable that redirect of port 8080. I found this rule: I disabled it by using "disable 15" and it now shows this: However, I don't know what this does to the effectiveness of the hotspot to block proxy settings.

Good morning SurferTim,

I tried your solution, hotspot grayed the value with dst-port 8080, and still we had no luck.

Anyways, we rever-se engineered the app and found that the customer is not using push notifications, he has a timer, that fires every 5 seconds and does an HTTP GET request to the server. We still did not found why the request doesn't fullfill when there are all the rules in the Walled Garden, but: Using Wireshark, we found all the three URL that requests every 5 seconds, the IP are in the walled garden, and using the mobile web browser and another device (a laptop with Firefox) the web browsers are able to complete the request and get the JSON answer, so we guessed that is something related to our customer's app (We will contact him).
Thank you very much to everyone for their replies and time

Greetings~!

Hi Katsuro

Can you explain how you cen send notification message to hotspot client users?I found some programs but really I need a real solution.

If you know any programs please share with us.

thanks..