Home / server / Questions / 747589
Accepted
JensB
Asked: 2016-01-09 02:14:12 +0800 CST

Routing and Remote Access: Allow LAN traffic, Block internet traffic

  • 772

I have just set up L2PT VPN server using RRaS on a Windows 2012 R2 server. I can connect to this machine from the internet and access the local network. This works perfectly.

I would however like to block internet access for the connected users so that they cannot browse (or download) anything from the internet over the VPN connection. They should only be able to access the local network, nothing else.

I can't find any guides for how to do this, any suggestions?

windows-server-2012-r2

2 Answers

  1. You could either block the http/https traffic via ports 80 and 443 to addresses outside your local network with the Windows firewall or you could disable common web browsers via software restriction policies.

    You might limit your group policies to certain users or use WMI filters to tailor everything to your needs.

    • 0
  2. Best Answer

    Solved this by setting which IPs the VPN users get and blocking those IP's in the router (DD-WRT) using the build in filtering for HTTP and HTTPS.

    • 0