how to block all output

i have the rang 10.10.10.0/24 for my users PPPoE and 10.10.10.1 is for mk

but the problem is that anyone who put this ip and gateway/dns = ip_mk can reach the internet
how can block the ip and all ip in mk ???
but all ip in masquerade can reach the internet

remove 10.10.10.1/24 address from the router.

:smiley: ok thanks