| 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859 |
- include $(TOPDIR)/rules.mk
- PKG_NAME:=gluon-ebtables-limit-arp
- PKG_VERSION:=1
- PKG_RELEASE:=1
- PKG_BUILD_DIR := $(BUILD_DIR)/$(PKG_NAME)
- include ../gluon.mk
- define Package/gluon-ebtables-limit-arp
- SECTION:=gluon
- CATEGORY:=Gluon
- TITLE:=Ebtables limiter for ARP packets
- DEPENDS:=+gluon-core +gluon-ebtables gluon-mesh-batman-adv
- endef
- define Package/gluon-ebtables-limit-arp/description
- Gluon community wifi mesh firmware framework: Ebtables rules to
- rate-limit ARP packets.
- This package adds filters to limit the amount of ARP Requests
- devices are allowed to send into the mesh. The limits are 6 packets
- per minute per client device, by MAC address, and 1 per second per
- node in total.
- A burst of up to 50 ARP Requests is allowed until the rate-limiting
- takes effect (see --limit-burst in the ebtables manpage).
- Furthermore, ARP Requests with a target IP already present in the
- batman-adv DAT Cache are excluded from the rate-limiting,
- both regarding counting and filtering, as batman-adv will respond
- locally with no burden for the mesh. Therefore, this limiter
- should not affect popular target IPs, like gateways.
- However it should mitigate the problem of curious people or
- smart devices scanning the whole IP range. Which could create
- a significant amount of overhead for all participants so far.
- endef
- define Build/Prepare
- mkdir -p $(PKG_BUILD_DIR)
- $(CP) ./src/* $(PKG_BUILD_DIR)/
- endef
- define Build/Configure
- endef
- define Build/Compile
- $(call Build/Compile/Default)
- endef
- define Package/gluon-ebtables-limit-arp/install
- mkdir -p $(1)/usr/sbin/
- $(CP) $(PKG_BUILD_DIR)/gluon-arp-limiter $(1)/usr/sbin/gluon-arp-limiter
- $(CP) ./files/* $(1)/
- endef
- $(eval $(call BuildPackage,gluon-ebtables-limit-arp))
|
