LAN To VLAN Deny Requests

ScarEye · 04-08-2007, 11:34 PM

Hey guys what's up, I had a quick question, and I a praying someone here can help me out. Basically I have a router configured like this.

LAN = 192.168.1.1
VLAN2 - 172.16.1.1

Now any machines behind LAN can get to LAN & VLAN2 and vise versa I would like to stop this from happening. I am running iptables, and I just don't know how I would stop this from happening.

Any comments, suggestions, help would be greatly appreciated.

Thanks
ScarEye

fotoguy · 04-09-2007, 06:35 AM

There is 2 ways you can do this. Turn ip forwarding off in the kernel, this will stop any data from travelling between the 2 interfaces.

At the command line type:

Code:

echo "0" > /proc/sys/net/ipv4/ip_forward

Or you could use iptables rules and set default FORWARD policy to drop:

Code:

iptables -P FORWARD DROP