gluon/package/gluon-ebtables-limit-arp/src/mac.h

/*
 * Copyright (c) 2017 Linus Lüssing <linus.luessing@c0d3.blue>
 *
 * SPDX-License-Identifier: GPL-2.0+
 * License-Filename: LICENSE
 */

#ifndef _MAC_H_
#define _MAC_H_

struct mac_addr {
	/* 8 instead of 6 for multiples of uint32_t for hashword() */
	unsigned char storage[8];
};

int mac_aton(const char *cp, struct  mac_addr *mac);
char *mac_ntoa(struct mac_addr *mac);

static inline int mac_is_multicast(struct mac_addr *addr)
{
	return addr->storage[0] & 0x01;
}

#endif /* _MAC_H_ */
gluon-ebtables-limit-arp: a package for ARP rate-limiting This package adds filters to limit the amount of ARP Requests devices are allowed to send into the mesh. The limits are 6 packets per minute per client device, by MAC address, and 1 per second per node in total. A burst of up to 50 ARP Requests is allowed until the rate-limiting takes effect (see --limit-burst in the ebtables manpage). Furthermore, ARP Requests with a target IP already present in the batman-adv DAT Cache are excluded from the rate-limiting, both regarding counting and filtering, as batman-adv will respond locally with no burden for the mesh. Therefore, this limiter should not affect popular target IPs, like gateways. However it should mitigate the problem of curious people or smart devices scanning the whole IP range. Which could create a significant amount of overhead for all participants so far. Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue> 2017-04-29 21:52:41 +00:00			`/*`
			`* Copyright (c) 2017 Linus Lüssing <linus.luessing@c0d3.blue>`
			`*`
			`* SPDX-License-Identifier: GPL-2.0+`
			`* License-Filename: LICENSE`
			`*/`

			`#ifndef _MAC_H_`
			`#define _MAC_H_`

			`struct mac_addr {`
			`/* 8 instead of 6 for multiples of uint32_t for hashword() */`
			`unsigned char storage[8];`
			`};`

			`int mac_aton(const char cp, struct mac_addr mac);`
			`char mac_ntoa(struct mac_addr mac);`

gluon-ebtables-limit-arp: do not add multicast addresses to filter With the batman-adv multicast support compiled back in again we end up with multicast addresses in the batman-adv translation table. Currently we wrongly interpret multicast addresses returned by TT as a unique host, too, which adds them with a source address filter to ebtables as well. However, the source address of an ethernet frames is never supposed to be a multicat one. This leads to unnecessary entries in ebtables. Fixing this by ignoring those MAC addreses returned by TT which have the multicast bit set. Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue> 2018-03-31 17:12:43 +00:00			`static inline int mac_is_multicast(struct mac_addr *addr)`
			`{`
			`return addr->storage[0] & 0x01;`
			`}`

gluon-ebtables-limit-arp: a package for ARP rate-limiting This package adds filters to limit the amount of ARP Requests devices are allowed to send into the mesh. The limits are 6 packets per minute per client device, by MAC address, and 1 per second per node in total. A burst of up to 50 ARP Requests is allowed until the rate-limiting takes effect (see --limit-burst in the ebtables manpage). Furthermore, ARP Requests with a target IP already present in the batman-adv DAT Cache are excluded from the rate-limiting, both regarding counting and filtering, as batman-adv will respond locally with no burden for the mesh. Therefore, this limiter should not affect popular target IPs, like gateways. However it should mitigate the problem of curious people or smart devices scanning the whole IP range. Which could create a significant amount of overhead for all participants so far. Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue> 2017-04-29 21:52:41 +00:00			`#endif /* _MAC_H_ */`