Question about wifi hotspot connection and internet access
On my device, I have 2 connections: a wifi hotspot and an ethernet (method=auto) connection with access to the internet.
My hotspot connection is created with following command:
nmcli con add type wifi ifname wlan0 autoconnect yes ssid <ssid> 802-11-wireless.mode ap 802-11-wireless.band bg ipv4.addresses <ipv4> ipv4.method shared wifi-sec.key-mgmt wpa-psk wifi-sec.psk <password>
Other clients, which connect to this hotspot running on my device, shall get the IP addresses from the DHCP server (which is automatically started with the hotspot connection), but they shouldn't get the internet access provided on the ethernet connection on my device.
The NM seems to create some iptables rules automatically, which allow sharing the internet connection from the ethernet interface.
How can I create a hotspot connection with DHCP server, but forbid sharing the internet connection, so that my clients can connect to the hotspot and get IP addresses, but are not able to access the internet?