I have a scheme like thisrouter 192.168.2.254/24eth0-192.168.2.1br0eth1-192.168.4.1/24user- 192.168.2.2/24and connected eth0 and eth1 like this to allow packets pass throughbrctl addbr br0brctl addif br0 eth0brctl addif br0 eth1dhclient br0and the user can ping to router directly but I want to block that pinging I tried even iptables -A OUTPUT -p icmp --icmp-type echo-request -j DROPiptables -A FORWARD -p icmp --icmp-type echo-request -j DROPand user still can ping to router, what am i doing wrong?
How to block communication between 2 different subnets?
iptables;routing;firewall;bridge