i have a client, who took 2 Mb from my isp. He has made a VPN by using 80 port. How can i block his outgoing VPN??? ANY Idea???
Block port 80 
Otherwise you might be able to do something using L7 filters.
Kind regards
Andrew
maybe block GRE protocol? what kind of VPN does he use?
Below is my torch result…
how can i block this by using layer 7 ???
thnxs,
raktim
why not just block port 80 for UDP?
i did it, But i m curious about layer7 filter. i upgraded my router to v3.10 just for layer7.
Any idea, how to block this in layer7 filter.
thnxs,
you need to use packet sniffer to determine if there is any kind of pattern in his connection. for example when he makes the connection, the initial packets could be the same always. so copy those strings and make into a l7 filter. L7 will consume a lot of resources, because it will have to look into every packet 