Block internet access expect the vpn connections

RouterOS General
1

Hello, I have a 951Ui-2HnD which is my vpn server, where are connecting 3 remote sites with vpn’s(pptp and l2tp). I would like to block the Internet access(but allow specific sites) on the local network of 951Ui-2HnD, with out affecting the vpn’s connections. I have think the following rules:

/ip firewall filter
chain=forward action=accept layer7-protocol=AllowedWebsites in-interface=bridgeLanWireless log=no
chain=forward action=drop in-interface=bridgeLanWireless log=no

This rules will affect the vpn connections? The vpn’s allow the remote sites to connect at the server which are at the local network of the 951Ui-2HnD.

Thanks for attention!

2

Hi Syleri,
Can you explain more about your IP plan for sites and every other information can help us to help you better?