The host MAC is C8:5 b: 76: AF: 75: AA IP are not fixed.
Need to let the host, only 3389 port (TCP or UDP) can access data, any other port, are not allowed to access the data.
The host and padavan router LAN3 through wiring.

Command is run on the router, the last effect is that on the host does not open any web page, can't any network, can only be remote desktop.
I can't read the iptables command, I watch for several hours, please don't throw the eldest brother next "himself to go to the manual" is gone