f238b01173
macvlan interfaces never directly exchange traffic with the underlying interface, but only with other hosts behind the interface. In consequence, router advertisements from the uradvd running on br-client could never reach local-node, preventing it from getting an IPv6 address without RAs from an external radvd. Fix this be replacing the macvlan interface with a veth pair (with the peer interface in br-client). As a side effect, this saves about 5KB of flash, as the veth module is simpler than macvlan.
8 lines
335 B
Plaintext
8 lines
335 B
Plaintext
rule 'IN_ONLY --logical-in br-client -i bat0 -j RETURN'
|
|
rule 'IN_ONLY --logical-in br-client -i local-port -j RETURN'
|
|
rule 'IN_ONLY --logical-in br-client -j DROP'
|
|
|
|
rule 'OUT_ONLY --logical-out br-client -o bat0 -j RETURN'
|
|
rule 'OUT_ONLY --logical-out br-client -o local-port -j RETURN'
|
|
rule 'OUT_ONLY --logical-out br-client -j DROP'
|