How to setup a LAN-Only VM? (ideally using iptables)

[Dav3]

Hi,

 

TLDR Question:  Can anyone point me to instructions on how to create a LAN-ONLY VM?  Ideally using only unraid's native iptables as the firewall.

 

Detailed version:

 

Due to a recent hack/IP-loss incident, I'm trying to use Unraid to set up a 'software assured' (IP protected) Windows environment where my proprietary IP can't leave the LAN.

 

So far I've successfully set up a Windows VM that supports GPU- passthrough, etc.  Now I need to firewall this VM to the LAN (block all WAN) and would like to use Unraid to do this.  I've installed a 2nd NIC and have eth0 & eth1 visible in settings/network.  I'm planning on creating a 2nd VM (accessible from the Windows VM via VNC/etc) that does have WAN access.

 

Is there a way to bind this Windows VM to the eth1 NIC & use unraid's native iptables routing the eth1 interface to block-all + allow-lan?

 

Help would be greatly appreciated.  Thanks.

 

Edited January 22, 2020 by Dav3
fixed br0 missing issue

[bonienl]

Please don't double post.

See