Home / server / Questions / 294608
Accepted
Troydm
Asked: 2011-07-28 06:32:24 +0800 CST

Tomato USB firewall rule

  • 772

At home I have tomato usb installed on my Asus RT-N16, i want to block all traffic from host let's say 192.168.0.100 to host 192.168.0.200. both hosts are inside local lan network.

how do i do that with iptables?

i've tried

iptables -I INPUT -i br0 -o br0 -d 192.168.0.200 -s 192.168.0.100 -j DROP

but it's not working

iptables tomato

1 Answers

  1. Best Answer

    Both hosts would appear to be in the same subnet in your example (as I'm assuming a /24 subnet). Without using a layer 2 filtering mechanism (like ebtables) you're not going to be able to filter that traffic.

    Hosts in the same subnet communicate to each other at layer 2 w/o needing a router to facilitate the communication. Because the router isn't involved your iptables rules aren't going to affect the traffic.

    • 2