Is disabling intranet access for guest networks supposed to work when a router is in AP mode? I saw it works by way of ebtables but I wasn't sure if those rules actually take effect when in AP mode.
It seems like there's no way to implement such a feature since AP mode means the device is leaving all the router functions up to the upstream router. It presumably just sees the traffic arriving on the LAN port connected to the AP.