But i'm guessing it's similar to TeamViewer where client connects to central server? In that case TCP connection goes only from client to internet server, but later desktop sharing can work in both ways. So you can't block TeamViewer only in one direction.