Iptables or network setup help Flint 2

[M.B]

I have a question for you guys because i am not that good at iptables. I want to have this concept on my network :

1. all client to use wg vpn just some devices to be excluded because are work devices and is better to use them with real ISP IP.
2. i want to use the Killswitch but if i active it now will kill the internet for the devices who are not using VPN(work ones)

is not possible to exclude this work devices out of this rules?

[xize11]

is this not possible with vpn policies?

Else if you need something very custom you can edit this piece of code, which is in /usr/bin/route_policy or you may can also make it much easier by typing ip rule and check the fw marks, then apply fw marks of wan and test?

[admon]

Yup, the VPN policies are the answer to this.
VPN Killswitch is always active - no need to set the additional one.

[M.B]

Thanks for info. i will try this way. will take a look on the rules