gluon-ebtables-filter-multicast: relax multicast firewall rules

Allow the transmission of a multicast packet as long as it is not flooded through the whole mesh. Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>
freifunk-gluon · Apr 11, 2018 · 8aa9534 · 8aa9534
1 parent 49de3d1
commit 8aa9534
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/package/gluon-ebtables-filter-multicast/files/lib/gluon/ebtables/355-mcast-drop b/package/gluon-ebtables-filter-multicast/files/lib/gluon/ebtables/355-mcast-drop
@@ -1 +1,6 @@
+if os.execute('batctl -v | grep -q "batman-adv: 2013.4"') ~= 0 then
+	rule ('MULTICAST_OUT -p IPv6 --ip6-dst ff02::1/128 -j DROP')
+	rule ('MULTICAST_OUT -p IPv6 --ip6-dst ff02::/ff0f:: -j mark --set-mark 0x4 --mark-target RETURN')
+end
+
 rule ('MULTICAST_OUT -j DROP')
diff --git a/package/gluon-mesh-batman-adv/luasrc/lib/gluon/upgrade/310-gluon-mesh-batman-adv-mesh b/package/gluon-mesh-batman-adv/luasrc/lib/gluon/upgrade/310-gluon-mesh-batman-adv-mesh
@@ -21,6 +21,7 @@ uci:section('batman-adv', 'mesh', 'bat0', {
 	routing_algo = routing_algo,
 	multicast_mode = true,
 	multicast_fanout = 16,
+	noflood_mark = '0x4/0x4',
 })
 uci:save('batman-adv')