nils/gluon
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
0cd6f95e9f
gluon/package
History
Linus Lüssing 0cd6f95e9f ebtables-segment-mld: Segment IGMP/MLD domain 
This patch adds a new gluon-ebtables package to filter IGMP/MLD messages
via ebtables.

For one thing this reduces multicast overhead: About one third of all
ICMPv6 multicast traffic in Lübeck or Hamburg is MLD.

Furthermore it removes a potential Distributed Denial-of-Service vector
(see Gluon ticket #553).

Finally, it is a prerequisite for enabling bridge multicast snooping in
a decentral and robust fashion.

Note that IGMP/MLD are filtered for multicast traffic coming from
the mesh, too (new MULTICAST_IN), as unfortunately there seem to
be other queriers somewhere in the mesh at least for Freifunk
Lübeck. Also adding these rules to be prepared to anyone intentionally
or unintentionally disabling these filters on his/her node.

Node operators not running Gluon (for instance gateway nodes) should
make sure to either enable multicast_router towards bat0 or disable
multicast snooping entirely if they have a bridge on top of bat0.

Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>
2016-09-09 00:20:32 +02:00
..
gluon-alfred gluon-core: commit all UCI configs at the end 2016-04-02 18:56:45 +02:00
gluon-authorized-keys Move all upgrade scripts to a common directory 2015-01-24 11:27:47 +01:00
gluon-autoupdater gluon-core: commit all UCI configs at the end 2016-04-02 18:56:45 +02:00
gluon-client-bridge Fix creation of IBSS interfaces on devices with two radios 2016-09-09 00:20:31 +02:00
gluon-config-mode-autoupdater i18n: s/noeud/nœud/ 2015-10-08 22:16:25 +02:00
gluon-config-mode-contact-info i18n: s/noeud/nœud/ 2015-10-08 22:16:25 +02:00
gluon-config-mode-core gluon-config-mode-core: clean up reboot handling 2016-09-09 00:20:31 +02:00
gluon-config-mode-geo-location gluon-config-mode-geo-location: add ability to hide the altitude field (#693) 2016-04-27 12:37:30 +02:00
gluon-config-mode-hostname i18n: s/noeud/nœud/ 2015-10-08 22:16:25 +02:00
gluon-config-mode-mesh-vpn gluon-config-mode-mesh-vpn: provide contact-information for reboot-message (#671) 2016-04-27 17:08:42 +02:00
gluon-core ar71xx-generic: switch default WAN/LAN assignment on Ubiquiti UAP Pro 2016-09-09 00:20:31 +02:00
gluon-ebtables ebtables-segment-mld: Segment IGMP/MLD domain 2016-09-09 00:20:32 +02:00
gluon-ebtables-filter-multicast ebtables-segment-mld: Segment IGMP/MLD domain 2016-09-09 00:20:32 +02:00
gluon-ebtables-filter-ra-dhcp Fix ebtables dhcpv6 rules 2014-10-19 16:02:30 +02:00
gluon-ebtables-segment-mld ebtables-segment-mld: Segment IGMP/MLD domain 2016-09-09 00:20:32 +02:00
gluon-l3roamd gluon-l3roamd: HACK: unfinished l3roamd package 2016-05-02 11:27:44 +02:00
gluon-legacy gluon-core: commit all UCI configs at the end 2016-04-02 18:56:45 +02:00
gluon-lock-password Move all upgrade scripts to a common directory 2015-01-24 11:27:47 +01:00
gluon-luci-admin gluon-luci-admin: Fix uploaded image validation 2016-09-09 00:20:31 +02:00
gluon-luci-autoupdater Add french translation 2015-09-17 07:28:09 +02:00
gluon-luci-mesh-vpn-fastd i18n: s/noeud/nœud/ 2015-10-08 22:16:25 +02:00
gluon-luci-node-role i18n: s/noeud/nœud/ 2015-10-08 22:16:25 +02:00
gluon-luci-portconfig gluon-config-mode-*, gluon-luci-portconfig: improve validation 2016-02-28 22:38:19 +01:00
gluon-luci-private-wifi gluon-luci-private-wifi: fix typo in code file and regenerate translation files (correctly this time) 2015-11-27 14:33:56 +01:00
gluon-luci-theme We're on Chaos Calmer now 2015-05-22 01:09:19 +02:00
gluon-luci-wifi-config i18n: s/noeud/nœud/ 2015-10-08 22:16:25 +02:00
gluon-mesh-babel gluon-mesh-babel: HACK: basic, experimental babel config 2016-05-02 11:27:44 +02:00
gluon-mesh-batman-adv-14 gluon-core: commit all UCI configs at the end 2016-04-02 18:56:45 +02:00
gluon-mesh-batman-adv-15 gluon-core: commit all UCI configs at the end 2016-04-02 18:56:45 +02:00
gluon-mesh-batman-adv-core Fix creation of IBSS interfaces on devices with two radios 2016-09-09 00:20:31 +02:00
gluon-mesh-vpn-fastd gluon-mesh-vpn-fastd: add missing iptables dependency confusing Kconfig 2016-09-09 00:20:31 +02:00
gluon-neighbour-info gluon-core: commit all UCI configs at the end 2016-04-02 18:56:45 +02:00
gluon-next-node gluon-next-node: remove local_node_route6 2016-05-03 23:30:45 +02:00
gluon-next-node-batman-adv gluon-next-node: split gluon-next-node-batman-adv 2016-05-02 11:27:44 +02:00
gluon-node-info gluon-node-info: add a script to fix whitespaces within the coordinates 2016-04-28 09:34:33 +02:00
gluon-radvd uradvd: set default lifetime to 900 2016-05-03 23:30:56 +02:00
gluon-respondd gluon-core: commit all UCI configs at the end 2016-04-02 18:56:45 +02:00
gluon-setup-mode ar71xx-generic: switch default WAN/LAN assignment on Ubiquiti UAP Pro 2016-09-09 00:20:31 +02:00
gluon-site Convert site.conf to JSON during build 2016-01-02 23:49:25 +01:00
gluon-status-page gluon-status-page: refactor creation of table rows and cells (#738) 2016-04-27 08:40:13 +02:00
gluon-status-page-api gluon-core: commit all UCI configs at the end 2016-04-02 18:56:45 +02:00
gluon-wan-dnsmasq gluon-wan-dnsmasq: fix usage of libpacketmark 2015-08-04 22:51:40 +02:00
l3roamd add l3roamd dev package (#736) 2016-05-02 12:03:04 +02:00
libgluonutil Add utility library libgluonutil 2016-02-02 06:39:22 +01:00