How to Block VPN and Encrypted DNS?

lama · 2022-05-13T08:30:14.877Z

So,… I’ve set rules to block access to some bad domains but some users (connected to AX1800) could STILL access to bad domains (Meaning they either use VPNs and use DNS encryption in their phones etc)

How to block client VPNs?
How to Restrict Client DNS encryption (TLS, DNSCrypt, QUIC etc) at protocol level?

If these features are not present in current firmware versions, is there any possibility of such features in 4.xx versions? hoping that there will be some kind of SSL defaults on new OpenWRTs???

alzhao · 2022-05-13T08:59:11.225Z

To block in protocol level, need DPI tools which are not present in the router.

Google DPI openwrt to find some reference.

wcs2228 · 2022-05-13T15:10:58.562Z

At least, you can try blocking all the VPN ports via LuCI → Firewall → Traffic Rules:

Please help to block nordvpn, thanks Technical Support for Routers

You can try blocking all the VPN ports, including for NordVPN, via LuCI → Firewall → Traffic Rules: I do not work for and I am not directly associated with GL.iNet

DNS over TLS uses Port 853, but DNS over DNSCrypt and QUIC use Port 443 that should not be blocked.

I do not work for and I am not directly associated with GL.iNet