I just installed a wireless access point into my network.
Here is a small diagram:
Internet <===> linux box with iptables <===> LAN
I plugged my wireless access point into the LAN and everything works ok. The network works between all of the devices.
I have a host of static addresses specified using dnsmasq. These addresses are basically x.y.z.1 through x.y.z.199
I have my dhcp server (on the linux box) set to hand out addresses between x.y.z.200 to x.y.z.250
My goal is to allow the LAN devices to talk to LAN devices and the internet. The wireless devices can only talk to the internet. I already have the first part of this working and configured. Just need the incantation for the second part. My wireless devices will be setup through dhcp.
I know a VLAN would be the perfect fit for this, but I don't have any managed switches and stuff. This is just for my home and I am going for cheap.
My hope was to do something like:
iptables -A input -p tcp -s 192.168.1.200:192.168.1.250 -d 192.168.1.1:192.168.1.199 -j REJECT iptables -A input -p udp -s 192.168.1.200:192.168.1.250 -d 192.168.1.1:192.168.1.199 -j REJECT
Of course, I can't though because iptables only uses blocks or a single ip. I am not even sure what the syntax would look like to do a block of addresses that fit into the range that I would like.
Thank you in advance!