Killswitch only for VPN routes

[alexmo1997]

Before #995, I was able to have my VPN block all traffic to only the routes (allowed IPs) of the VPN. I just do not want to connect to the IP range that is used by the VPN accidentally.
If I use the system killswitch, this breaks all other traffic and lockdown mode doesn't work either.
I am not sure if this is still possible anymore. Can somebody help?

[zaneschepke]

Hello,

I'm not entirely sure I understand the question, but if you just want to block traffic to a certain subset of ips, then you could just created a dummy tunnel configured with those ips as the allowed ips and always have that tunnel up, but let it just route to nowhere.

Feel free to add more details and/or share your exact use case and I'll try to assist further.

[alexmo1997]

No, I want to have a Killswitch (disable traffic without the VPN) only to the allowed ip range of my VPN.
So I generally traffic to go through the non-wg interface successfully, and have e.g. 123.123.123.123/24 go through the VPN, as that is in the allowed ips. And when the VPN fails or similar, I want the connections to 123.123.123.123/24 to be blocked, but no those to 8.8.8.8 for instance.