I need some assistance to create a set of iptable rules to route and restrict usage between interfaces in a bridge (br0).
# brctl show bridge name bridge id STP enabled interfaces br0 8000.002590387da2 no eth0 vnet0 vnet1
I have enabled net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables (for a description of what i need, see: Firewall on a KVM host, prevent access to VM:s).
I'm not skilled at iptables hacking and need some help, or a point in the right direction. Right now I'm not even sure in what table/chain I'm suppose to work against.