Browse Source

bird: Don't export IPv6 loopback IP via iBGP.

Signed-off-by: Maximilian Wilhelm <max@rfc2324.org>
Maximilian Wilhelm 6 years ago
parent
commit
c91ada0b4c
1 changed files with 8 additions and 1 deletions
  1. 8 1
      bird/ff-policy.conf

+ 8 - 1
bird/ff-policy.conf

@@ -89,7 +89,7 @@ function tag_site_routes ()
 	}
 
   {#-
-   # Tag all routes for prefixes longer that site prefix leaving a gateway
+   # Tag all routes for prefixes longer than site prefix leaving a gateway
    # as TE prefixes. They are for TE core -> gateway only and must not be
    # imported on other gateways.
    #}
@@ -120,12 +120,19 @@ filter ibgp_out {
 	if "IGP" = proto then
 		reject;
 
+	# Don't redistribute v6 LO IP
+	if "lo_v6" = proto then
+		reject;
+
+	# Don't redistribute null routes for bogon prefixes
 	if "bogon_unreach" = proto then
 		reject;
 
+	# Don't redistribute TE prefixes for FFRL
 	if "ffrl_te" = proto then
 		reject;
 
+	# Don't redistribute anything IF we are drained
 	if 1 = DRAINED then
 		reject;