From 9cecb1e836d607e1e53e3a3bf0f44035202a8b25 Mon Sep 17 00:00:00 2001 From: Matthias Schiffer Date: Tue, 3 Oct 2017 17:07:42 +0200 Subject: [PATCH] gluon-mesh-batman-adv: filter out all packages between bat0 and local-port Filtering by MAC address won't filter out multicast packages like router solicitations, causing uradvd to send out router advertisements with maximum frequency (every 3 seconds) in active meshes, even when no local client is actually interested in the advertisements. Fixes #1230 --- .../files/lib/gluon/ebtables/250-next-node | 3 +++ 1 file changed, 3 insertions(+) diff --git a/package/gluon-mesh-batman-adv/files/lib/gluon/ebtables/250-next-node b/package/gluon-mesh-batman-adv/files/lib/gluon/ebtables/250-next-node index 54dd7e32..c0e71465 100644 --- a/package/gluon-mesh-batman-adv/files/lib/gluon/ebtables/250-next-node +++ b/package/gluon-mesh-batman-adv/files/lib/gluon/ebtables/250-next-node @@ -1,6 +1,9 @@ local site = require 'gluon.site_config' local next_node = site.next_node +rule('FORWARD --logical-out br-client -i bat0 -o local-port -j DROP') +rule('FORWARD --logical-out br-client -i local-port -o bat0 -j DROP') + rule('FORWARD --logical-out br-client -o bat0 -d ' .. next_node.mac .. ' -j DROP') rule('OUTPUT --logical-out br-client -o bat0 -d ' .. next_node.mac .. ' -j DROP') rule('FORWARD --logical-out br-client -o bat0 -s ' .. next_node.mac .. ' -j DROP')