| 123456789101112131415161718192021222324252627282930313233 |
- gluon-ebtables-source-filter
- ============================
- The *gluon-ebtables-source-filter* package adds an additional layer-2 filter
- ruleset to prevent unreasonable traffic entering the network via the nodes.
- Unreasonable means traffic entering the mesh via a node which source IP does
- not belong to the configured IP space.
- You may first check if there is a certain proportion of unreasonable traffic,
- before adding this package to the firmware image. Furthermore, you should not
- use this package if some kind of gateway or upstream network is provided by
- a device connected to the client port.
- site.conf
- ---------
- prefix4 : optional
- - IPv4 subnet
- prefix6 :
- - IPv6 subnet
- extra_prefixes6 : optional
- - list of additional IPv6 subnets
- Example::
- prefix4 = '198.51.100.0/21',
- prefix6 = '2001:db8:8::/64',
- extra_prefixes6 = {
- '2001:db8:9::/64',
- '2001:db8:100::/60',
- },
|
