You can either use an unlang wrapper around the sqlippool....to either skip it or to call another sqlippool instance....or (and maybe better) define a virtual-server instance for queries coming from openvpn and have a totally different config for them (this keeps the server functionality isolated for each use case...leading to sanity later on ;-) ) alan