VPN Firewall?

Where should vpn firewall settings be configured?

Basically, they are set automatically. If you want to set extra rules or your own rules, go into Luci:

Advanced Settings > Network > Firewall > Traffic Rules

/usr/bin/setvpnfirewall