Comment by Aurornis

The law requires blocking all VPN access.

It's impossible to have perfect knowledge of the entire set of VPN exit node addresses.