iptables -N ROBOT-SEGMENT-FWD
iptables -A ROBOT-SEGMENT-FWD -i usb+ -o eth0 -j ACCEPT
iptables -A ROBOT-SEGMENT-FWD -i wlan0 -o eth0 -j ACCEPT
iptables -A ROBOT-SEGMENT-FWD -i eth0 -o usb+ -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -A ROBOT-SEGMENT-FWD -i eth0 -o wlan0 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -I FORWARD -j ROBOT-SEGMENT-FWD
iptables -t nat -A POSTROUTING -o eth0 ! -s 172.17.0.0/16 -j MASQUERADE
Desired Workflow:
Blocker:
FORWARDpolicy isDROPwith no rule betweenwlan0/usb+andeth0- nothing on the Systemcore's WiFi or USB ports can reach the robot network, only the Systemcore.Request:
FORWARDbetween the Systemcore WiFi/USB subnets andeth0.Tested: