As stated in the title I would like to restrict VPN clients' access to specific websites.
More specifically, I push the route for 5 websites to the clients via the server config. However, I would like to block CLIENTS's access to one of these websites on an ad-hoc basis. In order to achieve this I understand that I have to edit the SERVER's iptables (directly or via ufw).
Unfortunately, I cannot manage to find the right way to do it! The most promising rule I found is
-A FORWARD -m state --state NEW,ESTABLISHED,RELATED -d X.X.X.X -j REJECT
But that does not work. Maybe I am not putting the rule in the appropriate segment of ufw's before rules.
All other efforts (editing hosts, adding different rules in ufw, etc.) result in the server not being able to access the website, but with the clients unaffected by the rule!