Openvpn kill-switch

Installing and Using OpenWrt
1

Hello,
i installed openvpn, now i want kill-switch, i mean if vpn disconnected, network disable as well
what should i do?
below is my firewall setting:

kill
kill1986×1428 222 KB

Thanks.

2

If you remove the lan->wan forwarding, then the only way lan can reach the Internet is via VPN. So that's an inherent kill switch. If VPN is down the lan users won't see the regular Internet in any case.

3

so below is fine and kill-switch is workable?

kill2
kill21854×1270 181 KB

4

I don't know what openfw is. If you only had three zones: lan, wan, and vpn, that is the correct setup.

You could of course test it by intentionally breaking the OpenVPN config and confirming that lan can't reach the Internet without VPN.