Block WAN access for OpenVPN clients

[orion44]

Hello,

I would like to block WAN access for my second OpenVPN server, i.e. just allow LAN access. I am aware the option "Direct clients to redirect Internet traffic" set to "No" does not block WAN access.

Can this be done via the Custom Configuration field or do I have to setup the firewall rules (iptables) manually to block OpenVPN server #2 subnet from the WAN?

Thanks!