How to block local VPN traffic that's not through wireguard

[9b9e69c2-4b75-4420]

@monologue9484

If all traffic is blocked, the device shouldn’t be able to establish a VPN connection at all.

OP is looking to ensure everything is tunneled thru WG.

@monologue9484

I also noticed that clients blocked by the “All Other Traffic” OFF switch suddenly start hitting the Flint AdGuard DNS … why are those blocked clients still allowed to make DNS requests?

@ bruce: Wasn't there an updated firmware just released in the last 72 hours or so that addresses something like this? I saw the thread & your mention of it but I can't recall where it is ATM. I don't even specifically recall which device(s) it was related.

I found it; it was v4.8.1 on the Flint v3:

Flint 3 4.8.1 VPN+AdguardHome+NextDNS= IP LEAK

Just tried firmware 4.8.1 2025-08-20, seems that the issue has been completely resolved! Also, average DNS resolution time has returned to be low, I forgot to mention that it was crazy high with previous firmware (70-100ms). [Screenshot 2025-08-26 161528]