If all you want is dnsmasq, you can run that at home. How/why is OpenVPN Access Server a piece of this?
Anyway, it's simple, just push the DNS server to your client[s]. If you don't push any other routes, you won't have any route other than the VPN itself. Full tunnel (equivalent of
--redirect-gateway in
openvpn(8) community version) is not the default:
"vpn.client.routing.reroute_gw": "false"
hth, regards, rob0
