prevent isolated vlan from accessing anything, particularly the exposed vlan

1 files changed, 3 insertions, 0 deletions

diff --git a/src/main.rs b/src/main.rs
index cf4b4f4..4b4974b 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -39,6 +39,9 @@ fn filter() -> Result<()> {
 
     batch.add(&forward, MsgType::Add);
 
+    let deny_isolated_to_any = Rule::new(&forward)?.iface("eth0.30")?.drop();
+    batch.add(&deny_isolated_to_any, MsgType::Add);
+
     let allow_established = Rule::new(&forward)?.established()?.accept();
     batch.add(&allow_established, MsgType::Add);