Bypass VPN for exactly 1 particular destination ip

I combine your command and

iptables -A zone_lan_forward -d 8.8.8.8 -o eth0 -j ACCEPT

it works.

You can comfirm the result by

ping 8.8.8.8

cat /proc/net/nf_conntrack | grep icmp | grep 8.8.8.8

and check the second dst field.