Block clients to access internet without vpn

[sp00ky]

Hi,

I'm trying to deny some clients from accessing internet without using the VPN-connection that I have set up. (I wanna route all traffic for some clients through the VPN).
The VPN-connection is working but it seems that when it fails the clients still can access the internet.
Could someone please have a look?

See attachments for my for my rules in the firewall.

[johnpoz]

do you have any rules in your floating tab?  So your saying one of the IPs 1.21 or 1.22 are going outbound to the internet? Even when vpn is down?  What do you have setup on the rules that is flagging them with the a?

[sp00ky]

@johnpoz:

do you have any rules in your floating tab?  So your saying one of the IPs 1.21 or 1.22 are going outbound to the internet? Even when vpn is down?  What do you have setup on the rules that is flagging them with the a?

No floating rules at all. Yes, and inbound. hmm maybe thats it, i should block traffic from wan to 1.21 and 1.21 in the wan-tab.

Those with a 'a' have special gateway

[Derelict]

https://forum.pfsense.org/index.php?topic=76015.msg494089#msg494089

[sp00ky]

@Derelict:

https://forum.pfsense.org/index.php?topic=76015.msg494089#msg494089

ill give that a try tonight, thx!