123456789101112131415161718192021222324252627282930 |
- gluon-ebtables-source-filter
- ============================
- The *gluon-ebtables-source-filter* package adds an additional layer-2 filter
- ruleset to prevent unreasonable traffic entering the network via the nodes.
- Unreasonable means traffic entering the mesh via a node which source IP does
- not belong to the configured IP space.
- One may first check if there is a certain proportion of unreasonable traffic,
- before adding this package to the firmware image. Additional one should not
- use this package if some kind of gateway or upstream network is provided by
- a device connected to the client port.
- site.conf
- ---------
- prefix4 : optional
- - IPv4 subnet
- prefix6 :
- - IPv6 subnet
- extra_prefixes6 : optional
- - list of additional IPv6 subnets
- Example::
- prefix4 = '198.51.100.0/21',
- prefix6 = '2001:db8:8::/64',
- extra_prefixes6 = { '2001:db8:9::/64', '2001:db8:100::/60' },
|