Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

milk242

macrumors 6502a
Original poster
Jun 28, 2007
696
15
Hi Everyone,

I'm not sure where to post this but I desperately need some help with IPTables. If anyone has experience or suggestions, please chime in.

I have 2 virtual lans, called vlan3 and vlan1. My webserver is on vlan3 with an internal IP of 192.168.1.1 and the rest of my computers are on vlan 1 with an internal IP of 10.0.0.1. I need to be able to block my webserver from accessing anything on vlan1, but allow any computers on vlan1 to access the webserver.

Any suggestions?

I thought something like this would work but it just blocks both ways:
iptables -I INPUT -i vlan3 -j DROP

Nevermind figured it out

I did:
iptables -I FORWARD -i br0 -o vlan3 -j ACCEPT
iptables -I FORWARD -i vlan3 -o br0 -j DROP
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.