gluon-ebtables-filter-multicast: relax multicast firewall rules

Allow the transmission of a multicast packet as long as it is not
flooded through the whole mesh.

Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>
This commit is contained in:
Linus Lüssing 2019-02-16 23:37:30 +01:00
parent 5d55deabbc
commit b22c708dcb
2 changed files with 6 additions and 0 deletions

View File

@ -1 +1,6 @@
if os.execute('batctl -v | grep -q "batman-adv: 2013.4"') ~= 0 then
rule ('MULTICAST_OUT -p IPv6 --ip6-dst ff02::1/128 -j DROP')
rule ('MULTICAST_OUT -p IPv6 --ip6-dst ff02::/ff0f:: -j mark --set-mark 0x4 --mark-target RETURN')
end
rule ('MULTICAST_OUT -j DROP')

View File

@ -21,6 +21,7 @@ uci:section('batman-adv', 'mesh', 'bat0', {
routing_algo = routing_algo,
multicast_mode = true,
multicast_fanout = 16,
noflood_mark = '0x4/0x4',
})
uci:save('batman-adv')