Can you block X-VPN on a AC86U?

[D_Day]

Is it possible to block X-VPN on my AC86U without disabling vpn access altogether?
I have a child that is using x-vpn to bypass the restrictions that have been put in place but I can’t disable all vpn traffic as I have a vpn setup on the router. I’ve tried several DNS filtering services but nothing will block X-vpn.
Can anyone help?

 

[ColinTaylor]

According to this document and this the ports X-VPN uses aren't fixed so you would need to perform some sort of proxying or deep packet inspection to stand any chance of blocking it. Unless AiProtection has the ability to do that (I don't know because I don't use it) nothing else on the router has that capability.

 

[ChatmanR]

A

Is it possible to block X-VPN on my AC86U without disabling vpn access altogether?
I have a child that is using x-vpn to bypass the restrictions that have been put in place but I can’t disable all vpn traffic as I have a vpn setup on the router. I’ve tried several DNS filtering services but nothing will block X-vpn.
Can anyone help?

Apply CleanBrowsing DNS Family to the device. Merlin has included it under the Parental Controls section.

 

[ColinTaylor]

Apply CleanBrowsing DNS Family to the device. Merlin has included it under the Parental Controls section.

VPNs bypass DNS and other restrictions, that's why kids use them.

 

[sfx2000]

Is it possible to block X-VPN on my AC86U without disabling vpn access altogether?
I have a child that is using x-vpn to bypass the restrictions that have been put in place but I can’t disable all vpn traffic as I have a vpn setup on the router. I’ve tried several DNS filtering services but nothing will block X-vpn.
Can anyone help?

Well - in the absence of mad parenting skills... now it not time to be nice, be very direct, and show them this pic...

https://www.harborfreight.com/hand-tools/hammers-pry-bars/4-lb-drilling-hammer-98258.html

Good luck!

 

[ChatmanR]

VPNs bypass DNS and other restrictions, that's why kids use them.

The OP should try it anyway. We use it with good results at the school I support: https://cleanbrowsing.org/filters Use the Family option in Merlin's build: http://xx.xx.xx.x/DNSFilter.asp

 

[D_Day]

A


Apply CleanBrowsing DNS Family to the device. Merlin has included it under the Parental Controls section.

I did try using Cleanbrowsing and it couldn’t stop X-Vpn.

 

[D_Day]

Well - in the absence of mad parenting skills... now it not time to be nice, be very direct, and show them this pic...

View attachment 20787

https://www.harborfreight.com/hand-tools/hammers-pry-bars/4-lb-drilling-hammer-98258.html

Good luck!

Your hammer is looking like the only alternative I have left , I will have to line all of his technology up and start swinging. I spent the best part of 5 hours yesterday trying to find a way to block it.

 

[octopus]

Is it possible to block X-VPN on my AC86U without disabling vpn access altogether?
I have a child that is using x-vpn to bypass the restrictions that have been put in place but I can’t disable all vpn traffic as I have a vpn setup on the router. I’ve tried several DNS filtering services but nothing will block X-vpn.
Can anyone help?

Then the only way to block them is to block theirs ip-number of that vpnservice.

 

[D_Day]

According to this document and this the ports X-VPN uses aren't fixed so you would need to perform some sort of proxying or deep packet inspection to stand any chance of blocking it. Unless AiProtection has the ability to do that (I don't know because I don't use it) nothing else on the router has that capability.

So basically there is nothing I can do at the moment?

 

[D_Day]

Then the only way to block them is to block theirs ip-number of that vpnservice.

How would I find their IP address?

 

[octopus]

How would I find their IP address?

I have looked at their site and they have alot of servers. But maybe you can monitor their connection and take it IP out from that.
It's a lot of investigation to do that.

 

[Zastoff]

Did you try setting the device in LAN/DNS-filter?
Enable DNS-based Filtering =ON
Global Filter Mode = Router
And set the kids device there to Cleanbrowsing Family

 

[D_Day]

Did you try setting the device in LAN/DNS-filter?
Enable DNS-based Filtering =ON
Global Filter Mode = Router
And set the kids device there to Cleanbrowsing Family

I have tried that, it won’t block X-Vpn.
It’s so frustrating!

 

[Zastoff]

1: Change WiFi password or their access (pull the plug)..
2: See how they like X-VPN then
3: A long talk about respecting your rules
4: If they want the new WiFi password (or access back) You first install a admin app that controls what apps is allowed on the device, (if they download a new app you need to approve it first) (something like F-Secure app)
5: Hopefully control is back

 

[D_Day]

1: Change WiFi password or their access (pull the plug)..
2: See how they like X-VPN then
3: A long talk about respecting your rules
4: If they want the new WiFi password (or access back) You first install a admin app that controls what apps is allowed on the device, (if they download a new app you need to approve it first) (something like F-Secure app)
5: Hopefully control is back

That is the exact route I’m taking at the moment lol
I’m resetting the router, changing the password and locking him out as we speak.
I have also found out that he has been spoofing his MAC address on his laptop to getting around the restrictions so now I have to find a way of stopping that

 

[Wisiwyg]

I feel for you.... had one that did that - in grad school now. He resorted to logging onto the neighbors wifi.

 

[L&LD]

I have tried that, it won’t block X-Vpn.
It’s so frustrating!

Including a full power off and wait 10 minutes before powering up the router again?

 

[D_Day]

Including a full power off and wait 10 minutes before powering up the router again?

I’ve not tried that yet!
I’ll give it a go

 

[Zastoff]

Think it can be the MAC-Spoofing that can be the issue also
Guess a faster way to test that, Is to set Global Filter Mode = Cleanbrowsing Family
But first test your own device in the DNS-Filter so you dont lock yourself out (So you still can access router gui) or you may need to access router with cable