Hi, Maybe add something like "/sbin/iptables -I FORWARD -i tun -d 192.168.1.0/24 -j DROP" to "/etc/chilli/ipup.sh" (creating it, if needed)? Instead of "/sbin/iptables" using the function "ipt" (from /etc/chilli/up.sh) could be suited: /etc/chilli/ipup.sh: ipt -I FORWARD -i tun -d 192.168.1.0/24 -j DROP Steffen