ip netns add nonet ip link add veth0 type veth peer name veth1 ifconfig veth0 172.16.0.1/24 up ip link set veth1 netns nonet ip netns exec nonet ifconfig veth1 172.16.0.2/24 up /sbin/iptables -A INPUT -p tcp --dport 3306 -i eth0 -j DROP /sbin/iptables -A INPUT -p tcp --dport 3306 -i eth1 -j DROP