nils/gluon
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
62d8d3e8f2
gluon/package
History
Linus Lüssing 84a6f65f02 gluon-ebtables-limit-arp: a package for ARP rate-limiting 
This package adds filters to limit the amount of ARP Requests
devices are allowed to send into the mesh. The limits are 6 packets
per minute per client device, by MAC address, and 1 per second per
node in total.

A burst of up to 50 ARP Requests is allowed until the rate-limiting
takes effect (see --limit-burst in the ebtables manpage).

Furthermore, ARP Requests with a target IP already present in the
batman-adv DAT Cache are excluded from the rate-limiting,
both regarding counting and filtering, as batman-adv will respond
locally with no burden for the mesh. Therefore, this limiter
should not affect popular target IPs, like gateways.

However it should mitigate the problem of curious people or
smart devices scanning the whole IP range. Which could create
a significant amount of overhead for all participants so far.

Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>
2018-02-15 23:21:11 +01:00
..
gluon-alfred gluon-alfred: firewall: allow alfred server announces from mesh 2018-01-17 08:06:42 +01:00
gluon-authorized-keys treewide: rework check_site_lib.lua 2018-01-19 10:12:43 +01:00
gluon-autoupdater treewide: rework check_site_lib.lua 2018-01-19 10:12:43 +01:00
gluon-client-bridge gluon-core: rename iterate_radios() to foreach_radio(), pass whole radio section 2018-02-15 14:04:37 +01:00
gluon-config-mode-autoupdater Remove redundant virtual packages 2017-07-08 16:34:40 +02:00
gluon-config-mode-contact-info treewide: rework check_site_lib.lua 2018-01-19 10:12:43 +01:00
gluon-config-mode-core gluon-config-mode-core: allow returning functions from wizard modules 2018-02-15 20:57:53 +01:00
gluon-config-mode-domain-select gluon-config-mode-domain-select: new package 2018-02-15 20:57:53 +01:00
gluon-config-mode-geo-location treewide: rework check_site_lib.lua 2018-01-19 10:12:43 +01:00
gluon-config-mode-hostname Remove redundant virtual packages 2017-07-08 16:34:40 +02:00
gluon-config-mode-mesh-vpn treewide: use new gluon.site Lua library 2017-08-11 22:07:34 +02:00
gluon-core gluon-core: add newline to the end of sysconfig files 2018-02-15 20:57:53 +01:00
gluon-ebtables gluon-ebtables: Enable concurrent ebtables updates 2018-01-03 19:58:53 +01:00
gluon-ebtables-filter-multicast gluon-ebtables-filter-multicast: do not filter out Bridge Loop Avoidance 2017-12-27 17:22:37 +01:00
gluon-ebtables-filter-ra-dhcp gluon-ebtables-*: add dependency on gluon-mesh-batman-adv 2017-07-08 21:23:00 +02:00
gluon-ebtables-limit-arp gluon-ebtables-limit-arp: a package for ARP rate-limiting 2018-02-15 23:21:11 +01:00
gluon-ebtables-segment-mld gluon-ebtables-*: add dependency on gluon-mesh-batman-adv 2017-07-08 21:23:00 +02:00
gluon-ebtables-source-filter treewide: rework check_site_lib.lua 2018-01-19 10:12:43 +01:00
gluon-l3roamd gluon-core: firewall rework, make base policy more restrictive 2017-11-25 23:19:08 +01:00
gluon-lock-password Minify all Lua code 2016-07-10 20:14:25 +02:00
gluon-mesh-batman-adv treewide: rework check_site_lib.lua 2018-01-19 10:12:43 +01:00
gluon-mesh-vpn-core gluon-mesh-vpn-core: add public key to nodeinfo response 2018-02-04 20:47:53 +01:00
gluon-mesh-vpn-fastd gluon-mesh-vpn-core: add public key to nodeinfo response 2018-02-04 20:47:53 +01:00
gluon-mesh-vpn-tunneldigger treewide: rework check_site_lib.lua 2018-01-19 10:12:43 +01:00
gluon-neighbour-info gluon-neighbour-info: allow respondd replies on mesh and wan interface 2017-11-25 23:31:23 +01:00
gluon-node-info treewide: rework check_site_lib.lua 2018-01-19 10:12:43 +01:00
gluon-radv-filterd Add package gluon-radv-filterd 2018-01-25 23:02:49 +01:00
gluon-radvd gluon-radvd: improve coding style in initscript 2017-02-11 22:40:51 +01:00
gluon-respondd gluon-respondd: add system.domain_code to respondd provider "nodeinfo" 2018-01-26 12:32:47 +01:00
gluon-setup-mode treewide: rework check_site_lib.lua 2018-01-19 10:12:43 +01:00
gluon-site gluon-site: remove dependency of GLUON_MULTIDOMAIN on gluon-site 2018-01-28 11:24:42 +01:00
gluon-status-page gluon-status-page: improve localization (#1241) 2017-10-31 19:25:27 +01:00
gluon-status-page-api Replace luci-lib-jsonc with our own lua-jsonc 2018-01-18 16:28:59 +01:00
gluon-wan-dnsmasq Move luci-base dependency from gluon-core to gluon-setup-mode 2017-02-10 02:10:02 +01:00
gluon-web gluon-web: fix access to undefined in checkvalue() 2018-02-04 18:57:27 +01:00
gluon-web-admin gluon-web: fix radio button view of ListValues 2018-01-31 15:47:45 +01:00
gluon-web-autoupdater treewide: convert all LuCI-based packages to gluon-web 2017-02-22 01:31:25 +01:00
gluon-web-logging gluon-web-logging: remove uci:set() nil check 2017-08-08 04:31:53 +02:00
gluon-web-mesh-vpn-fastd gluon-web: fix radio button view of ListValues 2018-01-31 15:47:45 +01:00
gluon-web-network Use 'disabled' attribute instead of 'auto' to disable wired mesh interfaces 2018-01-11 23:06:36 +01:00
gluon-web-node-role treewide: rework check_site_lib.lua 2018-01-19 10:12:43 +01:00
gluon-web-private-wifi gluon-core: rename iterate_radios() to foreach_radio(), pass whole radio section 2018-02-15 14:04:37 +01:00
gluon-web-theme gluon-web: fix radio button view of ListValues 2018-01-31 15:47:45 +01:00
gluon-web-wifi-config gluon-web-wifi-config: make the code a bit nicer 2017-08-08 04:31:53 +02:00
libbatadv libbatadv: Add library for common batman-adv helpers 2017-12-27 17:40:30 +01:00
libgluonutil libgluonutil: merge domain and site configs 2018-01-26 12:32:47 +01:00
features build: introduce GLUON_FEATURES 2017-07-09 02:31:38 +02:00
gluon.mk package/gluon.mk: add to PKG_FILE_DEPENDS 2018-01-19 13:22:26 +01:00