How to block traffic from leakage on a DD-WRT router when OpenVPN is disconnected?

Question

openvpn

OpenVPN is up on the router. Well, that is, I connect from the computer already to the vpn network. How to properly block traffic through the firewall from leakage when disconnected? I mean on the router, what rules should be set for the firewall?

Answer 1

iptables -I FORWARD -i br0 -o tun+ -j ACCEPT
iptables -I FORWARD -i tun+ -o br0 -j ACCEPT
iptables -I FORWARD -i br0 -o vlan+ -j DROP
iptables -I INPUT -i tun+ -j REJECT
iptables -I FORWARD -i br0 -o ppp+ -j DROP
iptables -t nat -A POSTROUTING -o tun+ -j MASQUERADE
Save the configuration by clicking Save Firewall. You may need to reboot your router.