if i have:eth0  (no address)wlan0 (no address, providing wifi-hotspot by 'hostapd')br0   (local IP, bridging eth0+wlan0)eth1  (public IP, providing internet to above by net.ipv4.ip_forward=1)and i want to:block targetPublicIP only to eth0 (so that wlan0 clients CAN, and eth0 clients CAN NOT acess it).This is not working:iptables -A FORWARD -i eth0 -d targetPublicIP -j DROPprobably because iptables can not interfere inside bridge which is level2 or something... i have never used ebtables, maybe that can be solution, or ip rules, or what? What is the simplest solution for this?
iptables inside bridge
iptables;bridge;forwarding