ffho-ebtables-net-rules
=======================

The *ffho-ebtables-net-rules* package adds an additional layer-2 filter
ruleset to prevent unreasonable traffic entering the network via the nodes.
Unreasonable means traffic entering the mesh via a node which source IP does
not belong to the configured IP space.

One may first check if there is a certain proportion of unreasonable traffic,
before adding this package to the firmware image. Additional one should not
use this package if some kind of gateway or upstream network is provided by
a device connected to the client port.

site.conf
---------

**prefix4: optional**
- IPv4 subnet

**prefix6:**
- IPv6 subnet

**extra_prefixes6 : optional**
- list of additional IPv6 subnets

**additional_prefix6: outdated**
- list of additional IPv6 subnets

### example
```lua
{
  prefix4 = '198.51.100.0/21',
  prefix6 = '2001:db8:8::/64',
  extra_prefixes6 = { '2001:db8:9::/64', '2001:db8:100::/60' },
  ...
},
```