How To Only Use VPN & No ISP Access

[archy141]

I'm currently running Merlin 3.0.0.4.372.30_2 on my 66U & would appreciate a little assistance. I have openvpn client configured & working on the router.
I also use Comodo FW on the PC clients.

Is there anyway I can prevent communication by all clients when the VPN is down ?

Script on the router would be ideal compared to configuring a utility on the individual clients. If using a utility on the clients is the only possible way, recommendations would be appreciated. I'm guessing Comodo can help here.

 

[archy141]

I came across this & wonder if it can be successfully implemented on the 66U.

This post is to everyone that have openvpn configured in a dd-wrt router and wants to block all connections through the ISP if the VPN connection fails, avoiding leaking our real ISP IP.

...insert following line to the firewall rules: "iptables -I FORWARD -i br0 -o vlan2 -j DROP"
- br0 is the bridge with my lan ports & wireless
- vlan2 is my WAN port connected to the modem ISP

So if there is any connection starting from my lan or wifi to the wan port the firewall of the router blocks the connection.

My firewall rules are like this:
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
iptables -I FORWARD -i br0 -o vlan2 -j DROP
iptables -I INPUT -i tun0 -j REJECT
iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE

http://serverfault.com/questions/38...-hosts-route-through-openvpn-client-on-tomato