I'm trying to secure my host machine as much as I can, so I'm configuring iptables to restrict access to ssh, https and vnc ports only to few trusted addresses. Everything else is blocked. Next thing is to allow trafic to virtual machines. How can I do that? Don't have much expirience with iptables forwarding.
Default policy is DROP.
I tried with
iptables -I FORWARD -i vmbr0 -o tap111i5d0 -j ACCEPT
and
iptables -I FORWARD -i tap111i5d0 -o vmbr0 -j ACCEPT
but it doesn't work.
If I understood correctly, tap111i5d0 is virtual machines interface and traffic is forwarded to vmbr0.
What is the right way to do it?
Default policy is DROP.
I tried with
iptables -I FORWARD -i vmbr0 -o tap111i5d0 -j ACCEPT
and
iptables -I FORWARD -i tap111i5d0 -o vmbr0 -j ACCEPT
but it doesn't work.
If I understood correctly, tap111i5d0 is virtual machines interface and traffic is forwarded to vmbr0.
What is the right way to do it?