photo network

i was wondering if someone can help me with iptables for the router photo attached

On Router:
1.i need to ssh from blue to red:
my answer:
iptables -A INPUT -s 10.2.0.0 -p tcp --dport 22 -j accept
iptables -A output -s 10.2.0.0 -p tcp --sport 22 -j accept

2.i need to http from blue to red (required for patching)?

3. i need to Allow pings both ways
my answer"
iptables -A input -p icmp --icmp-type 8 -m state --stae new,established -j accept
iptables -A input -p icmp --icmp-type 0 -m state --stae new,established -j accept
iptables -A output -p icmp --icmp-type 8 -m state --stae new,established -j accept
iptables -A output -p icmp --icmp-type 0 -m state --stae new,established -j accept

4.then Allow nothing else
my answer:
iptables -A INPUT -j DROP

5.ssh must only listen on blue network interface (in: /etc/ssh/sshd_config)?

Which host(s) gets iptables?