Block the freegate

anyone knows who can Drop the forward traffic of application called ‘freegate’. use socks stuff

this application starts on udp src port and get out on dst tcp port 80,443 and sometimes on udp ports
I blocked this application by a app signature on my cisco router !!! hard work!!!
but i don`t know who can i figure out with my mikrotik stuff
please give a help!!!

:frowning:

check this:
/ip firewall filter add chain=forward action=drop protocol=udp dst-port=15479

thanks for reply but it doesnt work dude

Freegate/UltraSurf are really really difficult to block unless you have some good custom pattern matching . I’ve always found getting an employee fired for illegal browsing habits tends to discourage people from using proxy/firewall workarounds …

I tried it and it was okey!

If you could make a packet capture of the client traffic who is launching and connecting with this application, maybe we could look at that and figure out what to block safely.

Any update guys? I have same problem with freegate. I guess only way to block is L7. But there is no ready to use solution in L7.