Add all VPN clients to firewall zone that is configured in similar way as wan - enabled masquarading and everything prohibited.
Add all VPN clients to firewall zone that is configured in similar way as wan - enabled masquarading and everything prohibited.