Add package gluon-ebtables-filter-multicast-ffhh
This package provides some additional ebtables multicast rules to gluon-ebtables-filter-multicast for the Freifunk Hamburg network. current changes: drop icmpv6 echo-requests to all-nodes & all-routers
This commit is contained in:
parent
818765060b
commit
5d6b96cd2d
42
gluon-ebtables-filter-multicast-ffhh/Makefile
Normal file
42
gluon-ebtables-filter-multicast-ffhh/Makefile
Normal file
|
@ -0,0 +1,42 @@
|
|||
include $(TOPDIR)/rules.mk
|
||||
|
||||
PKG_NAME:=gluon-ebtables-filter-multicast-ffhh
|
||||
PKG_VERSION:=1
|
||||
PKG_RELEASE:=1
|
||||
|
||||
PKG_BUILD_DIR := $(BUILD_DIR)/$(PKG_NAME)
|
||||
|
||||
include $(INCLUDE_DIR)/package.mk
|
||||
|
||||
define Package/gluon-ebtables-filter-multicast-ffhh
|
||||
SECTION:=gluon
|
||||
CATEGORY:=Gluon
|
||||
TITLE:=Ebtables filters for multicast packets
|
||||
DEPENDS:=+gluon-core +gluon-ebtables gluon-ebtables-filter-multicast
|
||||
endef
|
||||
|
||||
define Package/gluon-ebtables-filter-multicast-ffhh/description
|
||||
Gluon community wifi mesh firmware framework: Ebtables filters for multicast packets
|
||||
|
||||
These filters drop non-essential multicast traffic before it enters the mesh.
|
||||
|
||||
Allowed protocols are: DHCP, DHCPv6, ARP, ICMP, ICMPv6, BitTorrent local peer discovery, BABEL and OSPF
|
||||
|
||||
This package provides some additional rules for the Freifunk Hamburg network
|
||||
endef
|
||||
|
||||
define Build/Prepare
|
||||
mkdir -p $(PKG_BUILD_DIR)
|
||||
endef
|
||||
|
||||
define Build/Configure
|
||||
endef
|
||||
|
||||
define Build/Compile
|
||||
endef
|
||||
|
||||
define Package/gluon-ebtables-filter-multicast-ffhh/install
|
||||
$(CP) ./files/* $(1)/
|
||||
endef
|
||||
|
||||
$(eval $(call BuildPackage,gluon-ebtables-filter-multicast-ffhh))
|
|
@ -0,0 +1,2 @@
|
|||
rule 'MULTICAST_OUT -p IPv6 --ip6-destination ff02::1 --ip6-protocol ipv6-icmp --ip6-icmp-type echo-request -j DROP'
|
||||
rule 'MULTICAST_OUT -p IPv6 --ip6-destination ff02::2 --ip6-protocol ipv6-icmp --ip6-icmp-type echo-request -j DROP'
|
Loading…
Reference in a new issue