How can I Hide my MAC Address from hackers and IP and username ...... ??????


I surprised that one HACKER gave me the names of users,MAC Address ,IP and IP mikroTik


How to defend myself ............Is there a solution?????

How can I Hide my MAC Address from hackers and IP and username ...... ??????


I surprised that one HACKER gave me the names of users,MAC Address ,IP and IP mikroTik


How to defend myself ............Is there a solution?????

help meeeeeeeeeeeeeeeeeeee!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

go to system > shutdown

the hacker will be stopped in his tracks.

seriously though, might want to examine your internal network. Chances are he's got an inside connection and you're not configured right.

i using hotspot mikrotik v2.9.27

and the hacker is know all the MAC address .... and can log by change MAC

How can i stop hacker........... please tel me

First of all how many clients are registered clients of yours. If you dont have any clients just disable the wireless card. Is this an option? Watch the registration find his MAC address, and make firewall rule to drop connection to that MAC. Let me know I will watch forum.

give me filter rules

If he has all this info about your network, chances are that you've got more than one devices compromised in your network. Shut Down EVERYTHING, boot each pc in safe mode, and scan it with an antivirus. Once youve done that. You should change ALL the passwords of the PCs and Network Devices. About the firewall configuration you should block all the ports that aren't needed from the inside of your network (eg allow only 25,80,110,445)

Try winbox>ip>firewall>add rule>chain=input>in>interface wlan1 or hotspot>advanced>mac of hacker>destination address=your device>action drop......... If this works then reset all passwords on devices, and MAC filter from here on out or User manager or WEP WAP or something.

Thank you ((jacoblydon)) for your reply to queries

Please .......... Explain in detail !!!!!!!!!!!!!

Winbox
Ip
firewall
Filter rules
add rule
chain=input
in.interface wlan1 or hotspot (?????)
advanced
MAK Address mak of hacker
destination address=your device
action drop

Well I didn't know what interface your Hot spot, was on wlan1, or named Hotspot. If you have both do same firewall rule on all Wireless interfaces.. It was compromised through wireless interface right?

Winbox
Ip
firewall
Filter rules
add rule
chain=input
in.interface wlan1 or hotspot (?????)
advanced
MAK Address mak of hacker
destination address=your device
action drop

chain-input yes because data will be on, input coming (in) to your device, and the MAC of suspected hacker you put on the advanced page of ip>firewall>advanced the MAC you think is comprising your AP. Destination address is the address of your device that the hacker has taken advantage of. Action=drop... connection from this suspected device

Thank you very ((jacoblydon)) for your reply to queries

1-Please saw pictures attached ... Are the settings correct???

2-I hope you tell me about The basic function of this rule ??and how to make sure it works properly

My Wi-Fi Network is like in the diagram -1- My server is MikroTik 2.9.27 I’m using HotSpot Authentication By Mac and HTTP CHAP and HTTP PAP, I create a user name for every client in my network.

Yes that looks right to me.

Is ether2, the port that has been compromised?

Is ether2, the port that has been compromised?

Yes

I Do that but no thing do !!!!!!!!!!!!!!!!!!!!!!

I hope you tell me about The basic function of this rule ??and how to make sure it works properly

Dear Sarmed,

As I see ur problem is related to this controversy http://forum.mikrotik.com/viewtopic.php ... ck+hotspot and u can disable default forward from ur wireless card to isolate ur client.about the person he told u all this information about ur users and there MAC its very simple cause u can do that with a simple scan program and then change ur MAC address and use the service as we discuss in the link above

Regards,

Yes

I Do that but no thing do !!!!!!!!!!!!!!!!!!!!!!

I hope you tell me about The basic function of this rule ??and how to make sure it works properly



It should work, the firewall is correct. The rule is correct. You did it right. The basic function of the rule is to stop access from the MAC of suspected hacker you have probing your network. You should not see the MAC of hacker show up if the rule is working. It sounds like you need a Mikrotik consultant to come and help you.

also make sure you make a new router user for yourself, and then disable the default admin user. the new user has to be in the full permission group.

and of course - buy a license for your routeros ...

Is there scripts is linking the MAC Address with the name computer (Hostname)???????????????

If i'm right srmed2000 is using hotspot to authenticate wireless users via mac so hacker uses their mac to steal their internet.
Well, if that's the case, there's almost nothing you can do about these hacks becouse you can't differ ppl that is cloning mac address from regular ppl. Sure, you can use the rule above which will block the regular user as well, but hacker will surely have all macs from that AP and that rule may just annoy him but not stop him.
My advice is to use user/password for hotspot clients rather than mac login, at least for users of that AP. Other alternative is to change regular users mac but that may be problem and it will work for a short time.
You can use some equipment/packet sniffing/radiate source positioning to track him, and when you got him... you know what to do - that will make an example for others.
And btw, you should learn basics of the Mikrotik first.

Yes! all the above said is good while hiding the MAC address through configuration settings. MAC access will be open to hackers when we allow them without any security settings. We can also be aware, first of all that our IP address are open to hackers for accessing the internal server details. I always prefer to hide my external IP address in order to take initiative at the beginning itself. I had used VPN software to hide the server IP and checked the IP address change through the website http://www.IP-Details.com/ and now it makes me alert regard unwanted IP access.