/ip firewall filter add chain=forward protocol=gre action=reject reject-with=icmp-protocol-unreachable Should block GRE protocol which is used by PPTP for data transfer, no other traffic should be affected. didn't work on my router. it should be like this: /ip firewall filter add chain=input protoc...

have you test on older The Dude versions ?? such as v3.6 ??