# Is it possible to block-non vpn traffic on specific device (MAC address)

**URL:** <https://forum.gl-inet.com/t/is-it-possible-to-block-non-vpn-traffic-on-specific-device-mac-address/31259>\
**Category:** VPN, DNS, Leaks\
**Created:** [July 10, 2023, 8:19pm UTC](https://forum.gl-inet.com/t/is-it-possible-to-block-non-vpn-traffic-on-specific-device-mac-address/31259 "2023-07-10T20:19:27Z")\
**Posts on this page:** 1\
**Showing post:** 11

<div class="post-metadata">

**Author:** ![T309](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/t/a9a28c/32.png) [@T309](https://forum.gl-inet.com/u/T309)\
**Post date:** [July 12, 2023, 6:52am UTC](https://forum.gl-inet.com/t/is-it-possible-to-block-non-vpn-traffic-on-specific-device-mac-address/31259/11 "2023-07-12T06:52:41Z")

</div>

Got it working! chatgpt + this thread + your direction to use custom firewall rules.  
I have a working iptables rule that drops the device when wgclient fails/is offline.

`iptables -I FORWARD -m mac --mac-source 66:2D:BF:64:EA:62 ! -o wgclient -j DROP`

It would of been nice to see it in the GUI but hey it works now, I’m not complaining anymore!  
Thanks for the help!

---

_[View the full topic](https://forum.gl-inet.com/t/is-it-possible-to-block-non-vpn-traffic-on-specific-device-mac-address/31259)._