Real easy - block port 27900 at his firewall
Yep, but these are both perm bans for telling others how to evade.