0

There is a user on my (home) network that keeps on exceeding their authority. Their latest ploy is to use the Betternet VPN.

Does anyone know if - and, if so,how, I can block this VPN on my router without blocking other things. (ie I'd prefer a default allow approach)

(Working at the command prompt is not a problem, I'm very familiar with Linux and iptables). What I am struggling with is to find the ports / IP's / protocols it uses. I would prefer not to block everything except http[s] for this user.

If there is a partial option - like blocking UDP but not TCP, that would be of interest as well, as would any hacks to make it harder for this user (I do not believe they have a good understanding of networking, and a friend helped them set this up)

Improve this question
7
  • 1
    YMMV but I feel like part of the problem is the user - if you're blocking this protocol, they may just figure out the next thing...
    – Journeyman Geek ♦
    Aug 20, 2021 at 3:32
  • @JourneymanGeek I am to some extent aware this might become a game of whack-a-mole, but its a mole I want to, and should be able to whack!
    – davidgo
    Aug 20, 2021 at 3:37
  • 1
    Would dd-wrt do something like packet capture? I used tcpdump (and wireshark would work too!) to investigate some slightly untrusted hardware in the past and this might be an approach here. I do run a custom router (and kinda have some hardware that can be repurposed for sniffing I suspect) which makes this easier...
    – Journeyman Geek ♦
    Aug 20, 2021 at 3:43
  • Betternet ports are 1194, 5228, 7268, 9110, if that helps. (though the ports they use appear to change quite often). Is there anything stopping them from using another VPN service?
    – pigeonburger
    Aug 20, 2021 at 3:46
  • @pigeonburgee - Thanks for this. I can easily lock openvpn and pptp, and they dont have a means of buying stuff online without my/my wifes help, so its not trivial for them.
    – davidgo
    Aug 20, 2021 at 3:50

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.