Blocking outbound ports & trusted sites list on VPN
-
Hello everyone,
I have a puzzle to solve. I want to block some outbound ports, sites list and some IPs. How do I solve this on pfSense while being connected to corp VPN (Twingate). Is there a way somehow to block the above inside that VPN?
-
@pfrickroll said in Blocking outbound ports & trusted sites list on VPN:
Is there a way somehow to block the above inside that VPN?
I'm not sure of how Twingate works. But if it is like a typical VPN where the connection to them is being done via an app on a device (computer, phone, tablet, etc) then as far as I know your are not going to be able to filter traffic via pfsense. All of the traffic routing out the device will be encrypted by the Twingate app and pfsense will not be able to see any of the destination information other than the routing of packets to Twingate. If this is the case, you'll have to revert to blocking on each device (host file, built-in firewall, etc).
If Twingate is set up as an interface in pfsense then you can address this by creating Aliases of the ports, sites and IPs you want to block then use those aliases in firewall rules on that interface.
