Home / server / Questions / 286812
In Process
nsg
Asked: 2011-07-05 05:41:18 +0800 CST

iptables on bridged networking

  • 772

I need some assistance to create a set of iptable rules to route and restrict usage between interfaces in a bridge (br0).

# brctl show
bridge name bridge id               STP enabled     interfaces
br0           8000.002590387da2     no              eth0
                                                    vnet0
                                                    vnet1

I have enabled net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables (for a description of what i need, see: Firewall on a KVM host, prevent access to VM:s).

I'm not skilled at iptables hacking and need some help, or a point in the right direction. Right now I'm not even sure in what table/chain I'm suppose to work against.

networking bridge iptables

2 Answers

    • 1

  2. You should probably read this to get an idea of which rules need to go where. This picture (copied from the Ubuntu wiki) provides a simple yet good overview of how traffic flows through iptables:

    enter image description here

    • 1