How to make access to a shared folder (WIN Server 2019) only through VPN, excluding the visibility of the server to the entire Internet via the SMB protocol?

Question

Computer networks

Windows Server 2019, VPS (virtual server, not in my network)
VPN configured via L2TP protocol. Connects successfully. I shared the folder, but everyone can connect to it with a username and password. In the firewall settings, I prohibit incoming SMB traffic, but then access to the folder is lost even if connected via VPN. I want to open incoming traffic only for VPN-connected users. Tell me how to do it

Answer 1

It was necessary to connect to a local address after connecting the VPN. Thanks antonwx for part of the solution.

Answer 2

Deny connections to the port with samba (445) for all ip, except for the range that is issued to vpn users