# Need both Internet Kill Switch and WAN access

**URL:** <https://forum.gl-inet.com/t/need-both-internet-kill-switch-and-wan-access/31066>\
**Category:** Router\
**Created:** [July 4, 2023, 3:13pm UTC](https://forum.gl-inet.com/t/need-both-internet-kill-switch-and-wan-access/31066 "2023-07-04T15:13:54Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![bring.fringe18](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bring.fringe18/32/11777_2.png) [@bring.fringe18](https://forum.gl-inet.com/u/bring.fringe18)\
**Post date:** [July 4, 2023, 8:07pm UTC](https://forum.gl-inet.com/t/need-both-internet-kill-switch-and-wan-access/31066/4 "2023-07-04T20:07:57Z")

</div>

> [@project9501](#):
>
> [...] _unless_ the destination IP is in the “outer” network.

GL GUI -\> VPN -\> VPN Dashboard -\> Global Proxy -\> VPN Policy Base On The Target Domain Or IP -\> Accessing Following Domain/IP -\> Not Use VPN/Use VPN sounds about right.

> [@project9501](#):
>
> I want “Block Non-VPN Traffic” enabled also, but when I enable it, the “Allow Access WAN” button [...]

Well, yeah. If you're blocking _everything_ non-VPN, there's no need to explicitly set a set of firewall rules to allow a bypass to another subnet.

... so you want to block non-VPN traffic but also allow WAN traffic to your upper ring (let's call it 'Ring 0') subnet to this one, Ring 1? That might be something possible via Customize Routing Rules but I've got no insight for 'ya there.

It could probably be done. This is after all, OpenWrt 'under the hood'. You might need to employ LuCI (GL GUI -\> System -\> Advanced Settings). My firewall skills are less than stellar.

... but be sure to make periodic backups throughout your progress.

> [@HOW-TO: Script: List My OPKGs (to a file for backup)](https://forum.gl-inet.com/t/how-to-script-list-my-opkgs-to-a-file-for-backup/30963):
>
> Keywords: backup, opkg, plugins, list, howto, script, shell, luci, restore, ipk, tarball, conf Description List user's (your) installed packages, writing them to a text file that can be used to reinstall the binaries of what a user manually installed. The resulting .list file will be use to opkg install to pull from the feeds. That is done with two commands in one execution. The GL GUI doesn’t feature a backup function. Creating & restoring a backup achieve (.tar.gz, aka tarball) of all your …

---

_[View the full topic](https://forum.gl-inet.com/t/need-both-internet-kill-switch-and-wan-access/31066)._