It is possible for primary LAN (but not VLAN). Simply create firewall rule that blocks all outbound TCP and UDP ports. Those rules do not apply when VPN Fusion is enabled with NAT, but they do apply when VPN is disabled and/or removed. Its a crappy VPN Killswitch, but it works, at least for primary LAN. It does not prevent leaks from VLAN's because ASUS WRT does not even allow creation of firewall rules for VLAN's.