blocking vpn connections

Most Relevant Content

  • How to Block VPN Access with MikroTik Router

    Sometimes system administrators create firewall rule to block unwanted websites. But VPN apps break these firewall rules and allow access to unwanted websites. For example, if Facebook is blocked with MikroTik Firewall and any expert user installs and enables VPN apps (such as OpenVPN, Hotspot Shield, ProtonVPN, NordVPN, PureVPN etc.), he can easily get access to Facebook. So, system administrators should also block popular VPN apps so that user cannot use those VPN servers. Blocking VPN apps is not so easy. You should be expert enough to block VPN application. In this article, I will discuss a simple trick to block VPN applications with MikroTik Firewall. Trick to Block VPN Applications (VPN Servers)  When any user installs and enables VPN application, it creates a tunnel between user computer and the VPN server. The user PC is now treated as a PC of the VPN network. So, any firewall rule applied on the user IP, does not work anymore. In a VPN enabled PC, if we find public IP address of our network with any online tools such as whatismyipaddress.com, we will find the VPN server IP instead of our MikroTik public IP. Now if we block that VPN server IP [...]

    READ MORE »

  • You May Also Like

  • »

    MikroTik VPN Configuration with PPTP (Connecting Remote Client) |   August 17, 2016

    VPN (Virtual Private Network) is a technology that extends private network across a public network. It enables private network users to send and receive data across public network as if their network devices were directly connected to the private network. There are many VPN services in MikroTik RouterOS 7. Among them, MikroTik PPTP is a mostly used VPN service. It is a client-server VPN technology. So, a user can access server, printer, IP phone and any other network devices of [...]

    READ MORE »

  • »

    How to Block a Phone from WiFi Router |   May 8, 2024

    We usually buy a WiFi Router from market and configure SSID and password to access it. We also configure DHCP Server so that whenever a phone or IP device gets connected to this SSID with the password, the device can get an IP address automatically and can get internet access. It is not possible to secure the WiFi Network keeping only the password authentication method. Because the password can be shared by the users or can be hacked easily. So, [...]

    READ MORE »

  • »

    MikroTik OpenVPN Configuration on TCP Port 443 with Windows OS |   April 6, 2020

    MikroTik OpenVPN is an amazing VPN solution. IT provides a secure and encrypted VPN tunnel across public network. Unlike PPTP and L2TP VPN Services which are poorly designed and can easily be blocked, OpenVPN can highly be customized and even can be run on so popular TCP Port 443. So, OpenVPN cannot easily be blocked. OpenVPN uses SSL/TLS Certificates. So, OpenVPN Tunnel is a trusted tunnel to send and receive data across public network. OpenVPN is a site to site [...]

    READ MORE »

  • »

    MikroTik Site to Site GRE Tunnel Configuration with IPsec |   March 26, 2018

    VPN (Virtual Private Network) is a technology that provides a secure tunnel across a public network. A private network user can send and receive data to any remote private network using VPN Tunnel as if his/her network device was directly connected to that private network. MikroTik provides GRE (Generic Routing Encapsulation) tunnel that is used to create a site to site VPN tunnel. GRE tunneling protocol which can encapsulate a wide variety of protocols creating a virtual point-to-point link was [...]

    READ MORE »

  • »

    How to Assign Static IP Address in Windows OS |   September 16, 2015

    Communication between one computer to another computer or server is established with IP addresses. Without IP address no communication is possible in computer network. An Internet Protocol (IP) Address is a numerical value or label assigned to each electronic device (e.g., computer, smartphone and printer) which uses Internet Protocol for communication. IP can be assigned both dynamically and statically on a IP devices. Dynamic IP is assigned by a DHCP server. If a DHCP server is present in a network, [...]

    READ MORE »

  • »

    MikroTik PPPoE Setup with Radius Server Prepaid Billing System |   December 23, 2017

    MikroTik PPPoE Server is popularly used in ISP Companies to maintain user connection. Along with MikroTik PPPoE Service it is a better idea to make a prepaid billing system with Radius Server. MikroTik User Manager Radius Server is a user authentication and accounting application that gives the ISP Company ability to manage PPPoE user’s connection with proper bandwidth management as well as their prepaid billing system with scratch card. So, any ISP Company can turn a smart network system with [...]

    READ MORE »

  • »

    ISP Bandwidth Management with MikroTik PCQ |   June 25, 2016

    MikroTik is an excellent router for managing ISP Bandwidth. For this, most of the ISPs are now using MikroTik Router for managing client bandwidth. The service used to manage bandwidth in MikroTik RouterOS is QUEUE. There are various types of queue services in MikroTik Router for managing internet bandwidth. Among these, PCQ can specially be used for maintaining ISP bandwidth. In this article, we will see how to manage ISP Bandwidth with MikroTik PCQ. MikroTik PCQ Service PCQ stands for [...]

    READ MORE »

  • »

    MikroTik User Manager RADIUS Installation on RouterOS 7 |   July 5, 2022

    The User Manager is a MikroTik provided RADIUS Server packages. It can be used to manage users for small or medium level business. User Manger is not a default RouterOS packages. So, we have to install user manager as an extra package in RouterOS 7. RouterOS 7 has brought a massive change on User Manager package. The most important change is managing User Manager from Winbox while in RouterOS 6 the User Manager package can only be managed from Web [...]

    READ MORE »

  • »

    MikroTik HotSpot One to One NAT/Universal HotSpot NAT |   September 27, 2020

    MikroTik Hotspot is an awesome service that can be customized widely. When MikroTik Hotspot is enabled on an interface, it adds dynamic destination NAT rules which will redirect all HTTP and HTTPS requests from unauthorized users to the Hotspot authentication proxy. So, no user can get internet access in Hotspot network without authentication. MikroTik Hotspot also uses one to one NAT providing an IP address from selected IP Pool and this IP address handles user’s data and limitation. Sometimes we [...]

    READ MORE »