|
@@ -0,0 +1,30 @@
|
|
|
+gluon-ebtables-source-filter
|
|
|
+============================
|
|
|
+
|
|
|
+The *gluon-ebtables-source-filter* package adds an additional layer-2 filter
|
|
|
+ruleset to prevent unreasonable traffic entering the network via the nodes.
|
|
|
+Unreasonable means traffic entering the mesh via a node which source IP does
|
|
|
+not belong to the configured IP space.
|
|
|
+
|
|
|
+One may first check if there is a certain proportion of unreasonable traffic,
|
|
|
+before adding this package to the firmware image. Additional one should not
|
|
|
+use this package if some kind of gateway or upstream network is provided by
|
|
|
+a device connected to the client port.
|
|
|
+
|
|
|
+site.conf
|
|
|
+---------
|
|
|
+
|
|
|
+prefix4 : optional
|
|
|
+ - IPv4 subnet
|
|
|
+
|
|
|
+prefix6 :
|
|
|
+ - IPv6 subnet
|
|
|
+
|
|
|
+extra_prefixes6 : optional
|
|
|
+ - list of additional IPv6 subnets
|
|
|
+
|
|
|
+Example::
|
|
|
+
|
|
|
+ prefix4 = '198.51.100.0/21',
|
|
|
+ prefix6 = '2001:db8:8::/64',
|
|
|
+ extra_prefixes6 = { '2001:db8:9::/64', '2001:db8:100::/60' },
|