calimero-project / calimero-server

KNXnet/IP server for KNX IP, KNX (RF) USB, FT1.2, and TP-UART
Other
52 stars 18 forks source link

[Question] Config for forwarding home KNX network to development net #19

Closed DrAColian closed 1 month ago

DrAColian commented 5 months ago

Hey,

so I've a calimero-server up an running for a development KNX system in order to keep my home system "clean".

Now, I'm wondering, if you have any idea for a configuration so the signals from my home KNX net are routed to my development net, but not vice versa - so the development communication should stay in that net.

Thnaks in advanced and kind regard Dr.A.Colian

bmalinowsky commented 5 months ago

I'm assuming you are solely talking about IP nets? The calimero server can filter KNX messages (like with the group address filter table), but then you wouldn't be able to observe them at all at the client side because they get blocked inside the server.

On Linux you would do this with iptables, e.g., when you know that all the dev communication comes from 192.168.x.y, you can add iptables -I INPUT -s 192.168.x.y -j DROP, which throws away all messages from that sender address. One can refine those rules ad nauseam, but it's essentially that.