ip netns add nonet | |
ip link add veth0 type veth peer name veth1 | |
ifconfig veth0 172.16.0.1/24 up | |
ip link set veth1 netns nonet | |
ip netns exec nonet ifconfig veth1 172.16.0.2/24 up | |
/sbin/iptables -A INPUT -p tcp --dport 3306 -i eth0 -j DROP | |
/sbin/iptables -A INPUT -p tcp --dport 3306 -i eth1 -j DROP |