freifunk/ffhh-packages
8
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Add package gluon-ebtables-filter-multicast-ffhh

Browse source 
This package provides some additional ebtables multicast rules to
gluon-ebtables-filter-multicast for the Freifunk Hamburg network.

current changes:
drop icmpv6 echo-requests to all-nodes & all-routers
This commit is contained in:
bdobe 2015-10-04 11:28:02 +02:00
parent 818765060b
commit 5d6b96cd2d
2 changed files with 44 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

42
gluon-ebtables-filter-multicast-ffhh/Makefile Normal file
View file

@ -0,0 +1,42 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=gluon-ebtables-filter-multicast-ffhh
PKG_VERSION:=1
PKG_RELEASE:=1
PKG_BUILD_DIR := $(BUILD_DIR)/$(PKG_NAME)
include $(INCLUDE_DIR)/package.mk
define Package/gluon-ebtables-filter-multicast-ffhh
SECTION:=gluon
CATEGORY:=Gluon
TITLE:=Ebtables filters for multicast packets
DEPENDS:=+gluon-core +gluon-ebtables gluon-ebtables-filter-multicast
endef
define Package/gluon-ebtables-filter-multicast-ffhh/description
Gluon community wifi mesh firmware framework: Ebtables filters for multicast packets
These filters drop non-essential multicast traffic before it enters the mesh.
Allowed protocols are: DHCP, DHCPv6, ARP, ICMP, ICMPv6, BitTorrent local peer discovery, BABEL and OSPF
This package provides some additional rules for the Freifunk Hamburg network
endef
define Build/Prepare
mkdir -p $(PKG_BUILD_DIR)
endef
define Build/Configure
endef
define Build/Compile
endef
define Package/gluon-ebtables-filter-multicast-ffhh/install
$(CP) ./files/* $(1)/
endef
$(eval $(call BuildPackage,gluon-ebtables-filter-multicast-ffhh))

2
gluon-ebtables-filter-multicast-ffhh/files/lib/gluon/ebtables/105-mcast-drop-icmpv6 Normal file
View file

@ -0,0 +1,2 @@
rule 'MULTICAST_OUT -p IPv6 --ip6-destination ff02::1 --ip6-protocol ipv6-icmp --ip6-icmp-type echo-request -j DROP'
rule 'MULTICAST_OUT -p IPv6 --ip6-destination ff02::2 --ip6-protocol ipv6-icmp --ip6-icmp-type echo-request -j DROP'