Hi,
I have a 493ah routerboard and i wanna block all outgoing connections from windows “remote desktop connection” with any port (not just 3389), anyone know that how should i do?
I have a domain network and 200 Clients.
tnx
What about:
add action=drop chain=output out-interface=WAN protocol=rdp
Wrong, protocol=rdp means something completely different and chain=output is only for router’s own output, not for forwarded packets.
To catch RDP on any port, it would require L7 matching. I did not test it, but there’s an example in wiki which is supposed to match RDP. But I’m affraid that doing it for all ports will hurt performance really bad.