I have a scheme like this
and connected eth0 and eth1 like this to allow packets pass through brctl addbr br0 brctl addif br0 eth0 brctl addif br0 eth1 dhclient br0
and the user can ping to router directly but I want to block that pinging
I tried even
iptables -A OUTPUT -p icmp --icmp-type echo-request -j DROP
iptables -A FORWARD -p icmp --icmp-type echo-request -j DROP
and user still can ping to router, what am i doing wrong?