66ead88dcb
LEDE recently disabled multicast snooping by default: https://git.lede-project.org/?p=project/netifd.git;a=commitdiff;h=52541140f8138e31958cdc3d7e42a4029fa6bbc9 Reenable it for Gluon as there have been no confirmed issues for LEDE and no negative reports concerning Gluon v2016.2.x so far. Closes #1025. Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>
71 lines
1.5 KiB
Lua
Executable File
71 lines
1.5 KiB
Lua
Executable File
#!/usr/bin/lua
|
|
|
|
local sysconfig = require 'gluon.sysconfig'
|
|
local sysctl = require 'gluon.sysctl'
|
|
local util = require 'gluon.util'
|
|
|
|
local uci = require('simple-uci').cursor()
|
|
|
|
|
|
local interfaces = uci:get('network', 'client', 'ifname') or {}
|
|
|
|
if type(interfaces) == 'string' then
|
|
local ifname = interfaces
|
|
interfaces = {}
|
|
for iface in ifname:gmatch('%S+') do
|
|
util.add_to_set(interfaces, iface)
|
|
end
|
|
end
|
|
|
|
if sysconfig.lan_ifname and not ifname and not uci:get_bool('network', 'mesh_lan', 'auto') then
|
|
for lanif in sysconfig.lan_ifname:gmatch('%S+') do
|
|
util.add_to_set(interfaces, lanif)
|
|
end
|
|
end
|
|
|
|
util.add_to_set(interfaces, 'local-port')
|
|
|
|
|
|
uci:delete('network', 'client')
|
|
uci:section('network', 'interface', 'client', {
|
|
type = 'bridge',
|
|
ifname = interfaces,
|
|
proto = 'none',
|
|
auto = true,
|
|
ipv6 = false,
|
|
macaddr = sysconfig.primary_mac,
|
|
igmp_snooping = true,
|
|
multicast_querier = true,
|
|
})
|
|
|
|
uci:save('network')
|
|
|
|
|
|
uci:delete('firewall', 'client')
|
|
uci:section('firewall', 'zone', 'client', {
|
|
name = 'client',
|
|
network = {'client'},
|
|
input = 'DROP',
|
|
output = 'DROP',
|
|
forward = 'DROP',
|
|
})
|
|
|
|
uci:save('firewall')
|
|
|
|
|
|
local dnsmasq = uci:get_first('dhcp', 'dnsmasq')
|
|
uci:set('dhcp', dnsmasq, 'boguspriv', false)
|
|
uci:set('dhcp', dnsmasq, 'localise_queries', false)
|
|
uci:set('dhcp', dnsmasq, 'rebind_protection', false)
|
|
|
|
uci:delete('dhcp', 'client')
|
|
uci:section('dhcp', 'dhcp', 'client', {
|
|
interface = 'client',
|
|
ignore = true,
|
|
})
|
|
|
|
uci:save('dhcp')
|
|
|
|
|
|
sysctl.set('net.ipv6.conf.br-client.forwarding', 0)
|