gluon-ebtables-source-filter.rst 890 B

123456789101112131415161718192021222324252627282930
  1. gluon-ebtables-source-filter
  2. ============================
  3. The *gluon-ebtables-source-filter* package adds an additional layer-2 filter
  4. ruleset to prevent unreasonable traffic entering the network via the nodes.
  5. Unreasonable means traffic entering the mesh via a node which source IP does
  6. not belong to the configured IP space.
  7. One may first check if there is a certain proportion of unreasonable traffic,
  8. before adding this package to the firmware image. Additional one should not
  9. use this package if some kind of gateway or upstream network is provided by
  10. a device connected to the client port.
  11. site.conf
  12. ---------
  13. prefix4 : optional
  14. - IPv4 subnet
  15. prefix6 :
  16. - IPv6 subnet
  17. extra_prefixes6 : optional
  18. - list of additional IPv6 subnets
  19. Example::
  20. prefix4 = '198.51.100.0/21',
  21. prefix6 = '2001:db8:8::/64',
  22. extra_prefixes6 = { '2001:db8:9::/64', '2001:db8:100::/60' },