I have a LAN to LAN VPN from my network to the office network. I'd like to limit access to my home network from the office. Ideally I'd like to allow communications from my side to anywhere in the office, but only connections initiated in the other direction from a limited number of IP addresses. If that wasn't possible then limiting the address symmetrically could work as well.

Is this possible? I think I can see how it might work using IP Objects, but I'm not really sure how to apply it only to the VPN, or to specify the different behaviours in different directions

Kevin