make sure no communication into the isolated vlan is possible either

1 files changed, 3 insertions, 0 deletions

diff --git a/src/main.rs b/src/main.rs
index 4b4974b..e55509f 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -42,6 +42,9 @@ fn filter() -> Result<()> {
     let deny_isolated_to_any = Rule::new(&forward)?.iface("eth0.30")?.drop();
     batch.add(&deny_isolated_to_any, MsgType::Add);
 
+    let deny_any_to_isolated = Rule::new(&forward)?.oface("eth0.30")?.drop();
+    batch.add(&deny_any_to_isolated, MsgType::Add);
+
     let allow_established = Rule::new(&forward)?.established()?.accept();
     batch.add(&allow_established, MsgType::Add);