Server: 192.168.1.1I want to theoretically disable that the clients can ping each other.Can i use an iptables rule for it? e.g.:iptables -A FORWARD -m iprange --src-range 192.168.1.2-192.168.1.255 --dst-range 192.168.1.2-192.168.1.255 -j DROPIs it true that i cannot filter traffic between the clients?? [or at least redirect these packets to e.g.: the router?]If i run tcpdump on the router [server] i can see that a client [192.168.1.201] is pinging another [192.168.1.162]# tcpdumptcpdump: WARNING: eth0: no IPv4 address assignedtcpdump: verbose output suppressed, use -v or -vv for full protocol decodelistening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes12:22:26.931343 IP 192.168.1.201 > 192.168.1.162: ICMP echo request, id 12547, seq 141, length 6412:22:27.819373 IP 192.168.1.201 > 192.168.1.162: ICMP echo request, id 12547, seq 142, length 6412:22:28.819640 IP 192.168.1.201 > 192.168.1.162: ICMP echo request, id 12547, seq 143, length 64
Where to handle packets between clients?
linux;security;iptables;firewall