How to implement firewall for iPad?

Question

Mikrotik

Foreword: They gave the mother-in-law an iPad to sit in classmates and use Skype. Everything would be fine, but the action takes place in the village, where there is only 3g from the Internet. The SIM card inserted into the iPad does not catch the network, a weak signal. Therefore, a 3g / 4g USB modem is inserted into the TP-Link mr2030 router, and WiFi is distributed. Since the router with the modem is raised to the attic, a direct line of sight is created with the cell tower and the 3g signal level is 90-100%, and WiFi reliably covers the entire house. But the problem is not the Internet and its quality, strange, but it works perfectly for the tasks.
Problem: It turned out that the iPad eats a huge amount of traffic if it is connected via WiFi. If you connect through a SIM card, then there are no unauthorized traffic leaks. But if via WiFi, then 8-15 GB per day, and this is if you don’t touch it at all, and this is both incoming and outgoing! traffic. I can't imagine what can be sent there in such volumes. How I measured the traffic: a Netgear 3500 router with tomato firmware, a beeline provider with a speed of 50 megabits. The router shows traffic statistics. Mobile on android consumes from 7 megabytes to 150, nexus a little more ... I collected statistics for more than a week. Every day, large amounts of traffic ... In the iPad settings I tried to block everything in a row, nothing helps, the feeling that this only works for the Internet from a SIM card, but not for WiFi. I tried to find programs to install on the device itself,
What solutions can you think of so that the monthly limit does not fly away in a day? I'm thinking of installing some kind of Mikrotik that supports 3g modems, I heard that Mikrotik has a firewall that can block anything. Or maybe there are other solutions?

Answer 1

On the device, try this program https://itunes.apple.com/ru/app/ucet-trafika-downl...
What's where it runs, look at the point, even in poor pieces of iron there should be some kind of service for this, well, or try running open-wrt, dd-wrt, etc. on it. If there is Mikrotik, then you can see for them where something is breaking, just as naturally, you can ban everything and then release it only where you say. If you figure out that the iPad is breaking into some servers you don’t need, then you can ban them, there are many options.
As another option, look carefully at the admin panel of the point, maybe it's not your iPad that eats so much tariff, but the neighbor's mom-hacker who broke your powerful hotspot under the protection of wep?

Answer 2

turn off icloud and its baubles ..