# Spitz GL-X3000 - Kill Switch?

**URL:** <https://forum.gl-inet.com/t/spitz-gl-x3000-kill-switch/44955>\
**Category:** VPN, DNS, Leaks\
**Created:** [July 18, 2024, 9:37pm UTC](https://forum.gl-inet.com/t/spitz-gl-x3000-kill-switch/44955 "2024-07-18T21:37:03Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![j2zero](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/j/7ea924/32.png) [@j2zero](https://forum.gl-inet.com/u/j2zero)\
**Post date:** [July 18, 2024, 10:00pm UTC](https://forum.gl-inet.com/t/spitz-gl-x3000-kill-switch/44955/3 "2024-07-18T22:00:12Z")

</div>

The VPN Killswitch is built in to the connection state. If you have the VPN enabled and the tunnel goes down (connection) then it will be killed.

If you disable the VPN client then the client will be able to talk over the clearnet (WAN) as the VPN rule will no longer be enforced.

I personally made a rule whereby a client that I have policy based routed should always be disconnected even if the VPN option has been disabled, you can visit my post here

> [@Suggestion\* Killswitch for VPN when VPN is disabled](https://forum.gl-inet.com/t/suggestion-killswitch-for-vpn-when-vpn-is-disabled/43391):
>
> I have the same desire as other users on this forum with regards to the "Killswitch" functionality. If I am using policy based routing (allowing only certain Mac addresses to access the VPN) I assume that if the Wireguard client was disabled (turned off) then the the policy based devices that are specified to go via the VPN would NOT hit the clearnet (WAN) that to me is a Killswitch. However, if the Wireguard client has been disabled / turned off then devices will use the WAN, only when the Wi…

---

_[View the full topic](https://forum.gl-inet.com/t/spitz-gl-x3000-kill-switch/44955)._