On a Mikrotik Router I have an VNP PPtP server with profiles. Right now after the VPN connection is made all the internet traffic from the remote site is routed to the new VPN connection and mikorotik WAN IP
How to block internet trafic from the remote connections?
Thanks
Either block it…
in-interface=username
out-interface=internet
action=drop
If you have lots of usernames, use a dynamic filter for ALL ppp sessions, or if the ppp users have a certain IP range, use that.
OR…
If you are using NAT (masquerade), simply DON’T masquerade them… again you can base that on IP range. This doesn’t technically block them, but their private IP address won’t route over the Internet and they won’t have access.
If you do this, they will have NO internet access while connected unless they uncheck “use default gateway on remote” in the TCP/IP settings of their ppp connection on their computer. Then, they will be using their own Internet, not yours.