Hello My friends ..!
so i want to apply a rule in my mikrotik RB951ui to prevent the inside users from using a VPN connection inside the LAN.
anyone can tell me if that can be achieved using the firewall rules..?
i try to apply a simple raw rule as the following to prevent user from using a specific website but when they run a VPN the rule was not valid anymore.
here is the previous rule:
ip–>firewall–>raw
chain:prerouting, Scr-add:10.10.10.1/24 (represent my LAN)-, content:the website url, action: add dst to address list, addresslist:block
then in firewall
chain:forward, dst address list: block, action:drop
Hi Techsystem this is bhavana here. To prevent inside users from using a VPN connection inside the LAN using Mikrotik RB951ui you have to follow the some points
Go to IP > Firewall > Address Lists. → Click the “+” button to create a new address list. → Give the address list a name, such as “VPN Servers”. → Add the IP addresses of the VPN servers that you want to block to the address list. → Click Apply and OK.
It is important to note that no blocking method is 100% effective. There are always ways to bypass blocks, especially if the users are determined. However, by using a combination of blocking methods, you can make it more difficult for users to use VPNs on your network.
To stop people using third party vpns from there comptuers or smartphones etc… GLuck with that.
You would have to block ports or IP addresses or both.