I have a Linux server that is running the KVM hypervisor. I have multiple bridges on this server (that are on different VLANS).
Is there an "easy" way to make sure that bridge hoping (i.e. routing between bridges) isn't allowed, however still allowing bridging within a bridge?
I know I can solve this by simply not assigning any IPs to the bridges, or any interfaces on the Linux box, but I'd rather also have a fail-safe to make sure this isn't allowed. Some iptables rule perhaps to keep traffic within a bridge?
Thanks