Technical topic: the easiest way for Ros to prevent L2 routes through TTL value

To prevent L2 routing, wayos can be implemented through the simple dial King client. I also described this (Ros can also be used). Next I will explain a simpler method of ROS:

 

Overview:

You can set the TTL value to prevent L2 routing.

Principle:

TTL is a value in the IP protocol package. It tells the network whether the packet is discarded because the time in the network is too long. There are many reasons that the package cannot be delivered to the destination within a certain period of time. The solution is to discard the packet after a period of time and then send the packet to the sender, which determines whether to resend the packet. The initial value of TTL is usually the default value of the system, which is the 8-bit domain in the header. The original assumption of TTL is to determine a time range and discard the package after this time.After each router, the TTL value must be at least-1., TTL usually indicates the maximum number of routers that can pass through before a packet is discarded. When the Count reaches 0, the router decides to discard the packet and send an ICMP packet to the original sender.
Based on this principle, the TTL of the data packet received during download is changed to 0. If the user uses a router, it sends-1 to the lower-level user, and-1 is not allowed, therefore, the route user can dial the number but cannot access the network.
However, if the lower-level route uses Ros or the route that can modify the TTL value can be cracked, this method can be effective for both fixed IP addresses and dial-up.

 

The following is the implementation code:

/IP fi man
Add action = change-TTL chain = forward comment = "" Disabled = no new-TTL = set: 64
Add action = change-TTL chain = forward comment = "" Disabled = No DST-address = 10.198.0.0 /16New-TTL = set: 0

10.198.0.0/16Change to your intranet IP address and mask Value