Configure iptables with a bridge and static IPs
- by Andrew Koester
I have my server set up with several public IP addresses, with a network configuration as follows (with example IPs):
eth0
\- br0 - 1.1.1.2
|- [VM 1's eth0]
| |- 1.1.1.3
| \- 1.1.1.4
\- [VM 2's eth0]
\- 1.1.1.5
My question is, how do I set up iptables with different rules for the actual physical server as well as the VMs? I don't mind having the VMs doing their own iptables, but I'd like br0 to have a different set of rules. Right now I can only let everything through, which is not the desired behavior (as br0 is exposed).
Thanks!