 Maximilian Wilhelm
|
6f0f5b35ff
nftables: Disable uRPF for non-routers entirely.
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
3407aa7492
nftables: Fix AF issue
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
876ef52736
nftables: Allow OSPF only on interfaces which should form an adjacency
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
97ed0e5bd8
nftables: Clean up
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
efda5a5c04
nftables: Clean up generator code + template
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
4acb9f1940
nftables: Allow mld-listener-reduction, too
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
e1724dda70
nftables: Only generate VXLAN roles when required
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
ea5aef8de8
nftables: Unify counters
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
e2a4779460
nftables: Allow link-local IPv6 in uRPF check
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
6e67dd76be
nftables: Allow IPv6 MLD
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
e73f0b9e7f
nftables: Do proper uRPF checks in input chain, too.
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
996e84a89c
nftables: Move uRPF checks into seperate chain
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
a4dcdec312
nftables: Allow respondd requests to B.A.T.M.A.N. adv. gateways
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
e7bf3f3bbc
nftables: Drop all broadcast packets before logging
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
9f302065c1
nftables: Allow DHCP requests according to firewall policy
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
c558c2fa6f
nftables: Allow VXLAN on interfaces requiring it.
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
c17fadd54f
nftabes: Generate rules for uRPF
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
ea33ab41c8
nftables: Ignore packets for UDP port 0
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
585642a35f
nftables: First shot at NAT support
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
a6db6d7f8f
nftables: First shot at generating forwarding rules.
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
96c3bd6188
nftables: Allow Icinga2 querier IPs
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
b90762e79c
nftables: Allow LibreNMS to query nodes
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
c944aae535
nftables: Use sets for iBGP peer IPs
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
843507256e
nftables: Allow OSPFv3 from link-local addresses, too.
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
4a8c83671c
nftables: Ignore echo protocol queries - looking at you FireTV
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
de1e261dc4
nftables: Default to empty service list if no services are configured
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Wilhelm
|
b7dc318b30
Add 1st shot for nftables state
|
%!s(int64=3) %!d(string=hai) anos |
