Hello,
I'm going to test KillMon. However, concerning iptables rules, I don't know how to block all LAN flow to the WAN when the VPN is down.
I am using the Merlin firmware.
The asus firmware does not block the flow when the vpn is down, it switches to the Wan without blocking.