3 ms·
How do you block "talking" to a VPN?
by kabacha 8y ago
How do you block "talking" to a VPN?
- tgragnato 8y agoWhen packets traverse the edge router, IX, cable (landing) station, .. if they're recognised as VPN traffic, then the server's IP (or IP / port) is added to a blacklist, every subsequent packet is dropped. https://en.wikipedia.org/wiki/Deep_packet_inspection https://en.wikipedia.org/wiki/Deep_packet_inspection
- exelius 8y agoYup; this is why VPN over HTTPS is a thing.
- tgragnato 8y agoHTTPS has whole series of side-channel leaks, which can be exploited to fingerprint the tunnelled protocol: many implementations don't add padding or active probing resistance. Sizable communications with an uncommon IP can be singled out by netflow analysis. But yes, it usually works.
- vbezhenar 8y agoYou will start with blocking their websites. Then you might want to reverse-engineer it just a little bit (for example to find out which domains they connect to) and block those domains. Usually that's enough to block most of people from using it.