script

#!/bin/sh

if [ "$1" = "eth0" ]; then

# force LAN port 4 to use the Guest network
ebtables -t broute -I BROUTING -p IPv4 -i vlan10 --ip-dst 192.168.1.0/24 --ip-proto tcp -j DROP
ebtables -t filter -I FORWARD  -i vlan10 -o ! eth0 -j DROP
ebtables -t filter -I FORWARD  -i ! eth0 -o vlan10 -j DROP

fi