block vpn apps
Most Relevant Content
How to Block VPN Access with MikroTik Router
Sometimes system administrators create firewall rule to block unwanted websites. But VPN apps break these firewall rules and allow access to unwanted websites. For example, if Facebook is blocked with MikroTik Firewall and any expert user installs and enables VPN apps (such as OpenVPN, Hotspot Shield, ProtonVPN, NordVPN, PureVPN etc.), he can easily get access to Facebook. So, system administrators should also block popular VPN apps so that user cannot use those VPN servers. Blocking VPN apps is not so easy. You should be expert enough to block VPN application. In this article, I will discuss a simple trick to block VPN applications with MikroTik Firewall. Trick to Block VPN Applications (VPN Servers) When any user installs and enables VPN application, it creates a tunnel between user computer and the VPN server. The user PC is now treated as a PC of the VPN network. So, any firewall rule applied on the user IP, does not work anymore. In a VPN enabled PC, if we find public IP address of our network with any online tools such as whatismyipaddress.com, we will find the VPN server IP instead of our MikroTik public IP. Now if we block that VPN server IP [...]
- »
WireGuard Site to Site VPN Between MikroTik RouterOS 7 | September 29, 2022
WireGuard is a free, open source, secure and high-speed modern VPN solution. WireGuard is extremely easy to implement but utilizes state-of-the-art cryptography. WireGuard can be used as either Client-Server VPN technology or Site to Site VPN technology. From the RouterOS 7, MikroTik introduces WireGuard VPN as their native package. So, who are using RouterOS 7 can use WireGuard VPN and can implement both client-server and site to site VPN with WireGuard free VPN server. In my previous article, I discussed [...]
- »
MikroTik Blocking Websites with TLS Host Firewall Matcher | April 29, 2019
Most of the websites now use https and blocking https websites is so much harder with the MikroTik RouterOS version less than 6.41. But from RouterOS v6.41, MikroTik Firewall introduces a new property named TLS Host that is capable to match https websites so easily. So, blocking https websites like Facebook, YouTube etc. can be easily done with MikroTik Router if RouterOS version is greater than 6.41. In my previous article, I discussed how to block websites with MikroTik Router [...]
- »
How to Install Extra Packages in MikroTik RouterOS | October 10, 2019
MikroTik RouterOS does not always include all the packages those are developed by MikroTik team. So, sometimes you may find that some packages are missing in your RouterOS such as NTP package, DUDE package, Wireless package, CAPsMAN package and so on. Specially, user manager package which is totally a separate MikroTik RADIUS package used to manage user authentication, authorization and accounting is always missing. Also upgrading RouterOS or downgrading RouterOS you may find that some packages are missing there. So, [...]
- »
How to Create Free SSL/TLS Certificate with OpenSSL | July 23, 2021
SSL/TLS certificate is required to encrypt data sent over internet communication. Without encryption, the sent data can be hacked by the middle man attack. SSL/TLS certificate is usually a pair key, public key and private key, solution where data is encrypted with public key and decrypted with private key. In public communication, public key is required to be signed by a CA (certificate authority) but in private communication, there is no need to be signed by any CA. If we [...]
- »
VMware ESXi 7.0 Installation and Basic Configuration | December 1, 2020
VMware vSphere is the pioneer in virtualization world. No other virtualization software is as feature rich as VMware vSphere. More than 500,000 enterprise data center are now using VMware vSphere. It is expected that most of the data center will be turned into virtualization in near future. As VMware vSphere provides more feature than any other virtualization software, it is also expected that demand of VMware vSphere will increase day by day. VMware ESXi is the foundation of VMware vSphere [...]
- »
How to Block a Phone from WiFi Router | May 8, 2024
We usually buy a WiFi Router from market and configure SSID and password to access it. We also configure DHCP Server so that whenever a phone or IP device gets connected to this SSID with the password, the device can get an IP address automatically and can get internet access. It is not possible to secure the WiFi Network keeping only the password authentication method. Because the password can be shared by the users or can be hacked easily. So, [...]
- »
MikroTik Hotspot HTTPS Redirect with Free SSL Certificate | June 21, 2020
SSL Certificate is required to enable HTTPS Login and HTTPS Redirect in MikroTik Hotspot. In one of my last articles I discussed how to configure MikroTik Hotspot HTTPS redirect and HTTPS login with MikroTik self-signed certificate. But self-signed certificate is not trusted by operating system. So, we get the following two issues if we configure HTTPS Login and HTTPS Redirect with self-signed certificate. Ask to proceed unsafe site: As browsers cannot trust self-signed certificate, it shows a warning message and [...]
- »
ISP Bandwidth Management with MikroTik PCQ | June 25, 2016
MikroTik is an excellent router for managing ISP Bandwidth. For this, most of the ISPs are now using MikroTik Router for managing client bandwidth. The service used to manage bandwidth in MikroTik RouterOS is QUEUE. There are various types of queue services in MikroTik Router for managing internet bandwidth. Among these, PCQ can specially be used for maintaining ISP bandwidth. In this article, we will see how to manage ISP Bandwidth with MikroTik PCQ. MikroTik PCQ Service PCQ stands for [...]
- »
MikroTik Hotspot Customization | April 5, 2017
Hotspot is one of the most popular services in MikroTik router. MikroTik Hotspot Gateway is a policy to authorize network clients before to access local network resources as well as public network resources through MikroTik router. In a Hotspot network, the user can login or authenticate using almost any web browser, so there is no need to install any additional software to client end. As Hotspot login prompt is a webpage, Hotspot service can effectively be used as an advertising medium of [...]
You May Also Like
