Add package gluon-ebtables-filter-multicast-ffhh
This package provides some additional ebtables multicast rules to gluon-ebtables-filter-multicast for the Freifunk Hamburg network. current changes: drop icmpv6 echo-requests to all-nodes & all-routers
This commit is contained in:
parent
818765060b
commit
5d6b96cd2d
42
gluon-ebtables-filter-multicast-ffhh/Makefile
Normal file
42
gluon-ebtables-filter-multicast-ffhh/Makefile
Normal file
|
@ -0,0 +1,42 @@
|
||||||
|
include $(TOPDIR)/rules.mk
|
||||||
|
|
||||||
|
PKG_NAME:=gluon-ebtables-filter-multicast-ffhh
|
||||||
|
PKG_VERSION:=1
|
||||||
|
PKG_RELEASE:=1
|
||||||
|
|
||||||
|
PKG_BUILD_DIR := $(BUILD_DIR)/$(PKG_NAME)
|
||||||
|
|
||||||
|
include $(INCLUDE_DIR)/package.mk
|
||||||
|
|
||||||
|
define Package/gluon-ebtables-filter-multicast-ffhh
|
||||||
|
SECTION:=gluon
|
||||||
|
CATEGORY:=Gluon
|
||||||
|
TITLE:=Ebtables filters for multicast packets
|
||||||
|
DEPENDS:=+gluon-core +gluon-ebtables gluon-ebtables-filter-multicast
|
||||||
|
endef
|
||||||
|
|
||||||
|
define Package/gluon-ebtables-filter-multicast-ffhh/description
|
||||||
|
Gluon community wifi mesh firmware framework: Ebtables filters for multicast packets
|
||||||
|
|
||||||
|
These filters drop non-essential multicast traffic before it enters the mesh.
|
||||||
|
|
||||||
|
Allowed protocols are: DHCP, DHCPv6, ARP, ICMP, ICMPv6, BitTorrent local peer discovery, BABEL and OSPF
|
||||||
|
|
||||||
|
This package provides some additional rules for the Freifunk Hamburg network
|
||||||
|
endef
|
||||||
|
|
||||||
|
define Build/Prepare
|
||||||
|
mkdir -p $(PKG_BUILD_DIR)
|
||||||
|
endef
|
||||||
|
|
||||||
|
define Build/Configure
|
||||||
|
endef
|
||||||
|
|
||||||
|
define Build/Compile
|
||||||
|
endef
|
||||||
|
|
||||||
|
define Package/gluon-ebtables-filter-multicast-ffhh/install
|
||||||
|
$(CP) ./files/* $(1)/
|
||||||
|
endef
|
||||||
|
|
||||||
|
$(eval $(call BuildPackage,gluon-ebtables-filter-multicast-ffhh))
|
|
@ -0,0 +1,2 @@
|
||||||
|
rule 'MULTICAST_OUT -p IPv6 --ip6-destination ff02::1 --ip6-protocol ipv6-icmp --ip6-icmp-type echo-request -j DROP'
|
||||||
|
rule 'MULTICAST_OUT -p IPv6 --ip6-destination ff02::2 --ip6-protocol ipv6-icmp --ip6-icmp-type echo-request -j DROP'
|
Loading…
Reference in a new issue