Looks not promising, not comfortable and buggy afaik. No. No chance. 0. The packets attach themselves at the end of usual http traffic, sometimes they are embedded in different filetypes, kind of stego. One thing is sure, neither any software firewall can do that, nor any usual router will be able to block it. Firewall ip blacklisting, VPN/tunneling combined with very good proxies can limit their activities but not totally stop the "tao water", afaik.