[redfern314]

Close, but it's a little bit different than how you describe it. The router is connected between the phone and the other devices in this user's scenario. The default TTL on Linux and Android is 64. If you tether, the packet will go through your phone and have its TTL decremented to 63 (the phone is a gateway). Then when it arrives at the cell tower with a lower TTL, they know you're tethering and drop the packet.

If you set it to 65 on your host device or router, it will be decremented to 64 on the phone - and is now hard to distinguish from real traffic from the phone.

[ayewo]

I was bit confused while trying to digest the TTL hack up thread, but your explanation completed cleared up my confusion, so thank you for that.

[colejohnson66]

So 65 isn't necessarily the correct value, but whatever the phone's default is?

[evgen]

You want it to be one more than the value the phone uses as its default. Then when the packet arrives at the phone via the tether its TTL is decremented and it is passed out to the tower. Tower sees a packet with a TTL that it is expecting and assumes it is phone data.