[lime-users] Failure of security in community networks in Brazil

Hello World! My name is Hiure, I am a member of coolab ( coolab.org). This is the first time I write to this list , I am a beginner on administrate networks and configure equipments. By initiative from COOLAB we are starting a few community networks around Brazil. One of them is where I live , in a rural community in the city of Monteiro Lobato, State of São Paulo. Here we start since the creation of a association to formalize the communitary network and create a model to guide on the other COOLAB installations. We arre using the last version of libremesh , cooking it in the cooker. As we still in a test phase we have only six nodes , the gateway is a tplink wdr3500. With a captive portal, we are running this adapt version to nodogsplash (http://wiki.coolab.org/index.). This system is fundamental to keep the network sustainable, without it we can not finance the connection and technical support for the network. The problem is, in the last months some people found a way to hack this system. What I understood so far: There is a cellphone app that create tunnels for diferent ports and instead of swap packages DNS it tunell all the packages by there. I know just a few things about how firewall, iptables, ebtables, etc, i have been studying it in the last months , but it seens much more complicated because it look that in libremesh, with so many interfaces, its get hard to understand and to execute a rule that can solve this problem. If someone can help me with some tips on t do it , or sending some material where I can study to understand better this questions, it would be great bests Hiure