More specifically, I push the route for 5 websites to the clients via the server config. However, I would like to block CLIENTS's access to one of these websites on an ad-hoc basis. In order to achieve this I understand that I have to edit the SERVER's iptables (directly or via ufw).
Unfortunately, I cannot manage to find the right way to do it! The most promising rule I found is
-A FORWARD -m state --state NEW,ESTABLISHED,RELATED -d X.X.X.X -j REJECT
But that does not work. Maybe I am not putting the rule in the appropriate segment of ufw's before rules.
Also various rules of the OUTPUT chain seem worthless.
All other efforts (editing hosts, adding different rules in ufw, etc.) result in the server not being able to access the website, but with the clients unaffected by the rule!
To my surprise I cannot find a suggestion that works, although I thought that website access-control on a VPN would be a trivial issue.
