Restricting internet access to OpenVPN clients?

Question

openvpn

Hello. When creating a VPN network, I set everything up so that clients use only their own Internet. I didn't add "push redirect-gateway def1 bypass-dhcp" and "push "dhcp-option DNS 8.8.8.8 "
options
.
172.20.0.0/24 -o eth0 -j MASQUERADE
But now it became necessary that some clients, when connected to OpenVPN, could use their Internet channel only to create a tunnel by the OpenVPN server, and work in the VPN network itself was carried out only with connected devices, without Internet access through the server Is it possible to do this through the ccd config?

Answer 1

Separate those who need the Internet, and who do not need it, into different address ranges, and twist access to iptables.