Hi all.
i have been using mikrotik to block certain sites from being accessed @ office.. but its not working perfectly cause
user are using public vpn to access those sites (mostly using softether vpn client with access to public relay vpn server)
i figure out its almost imposible to block the vpn connections cause there a thousands of ip and ports that serves as a voluenteer vpn server there..
right now i decided to mark the packet/ url being accessed through the vpn connection via mangle and content and layer7.. its work like a charm in normal condition but sadly mikrotik didn not detect those packet at all if being accesed via vpn 
please help me .. sticky this post. i’m sure there a others like mne who stumble the same problem..
tq so much everyone - sory for the bad english 