Skip to content
Snippets Groups Projects
Commit 225f15f9 authored by Matthias Schiffer's avatar Matthias Schiffer
Browse files

gluon-next-node: add ebtables to filter IP packets with the next-node address

parent 18f0fc63
No related branches found
No related tags found
No related merge requests found
...@@ -2,3 +2,13 @@ rule FORWARD --logical-out br-freifunk -o bat0 -d @next_node.mac@ -j DROP ...@@ -2,3 +2,13 @@ rule FORWARD --logical-out br-freifunk -o bat0 -d @next_node.mac@ -j DROP
rule OUTPUT --logical-out br-freifunk -o bat0 -d @next_node.mac@ -j DROP rule OUTPUT --logical-out br-freifunk -o bat0 -d @next_node.mac@ -j DROP
rule FORWARD --logical-out br-freifunk -o bat0 -s @next_node.mac@ -j DROP rule FORWARD --logical-out br-freifunk -o bat0 -s @next_node.mac@ -j DROP
rule OUTPUT --logical-out br-freifunk -o bat0 -s @next_node.mac@ -j DROP rule OUTPUT --logical-out br-freifunk -o bat0 -s @next_node.mac@ -j DROP
rule FORWARD --logical-out br-freifunk -o bat0 -p IPv4 --ip-destination @next_node.ip4@ -j DROP
rule OUTPUT --logical-out br-freifunk -o bat0 -p IPv4 --ip-destination @next_node.ip4@ -j DROP
rule FORWARD --logical-out br-freifunk -o bat0 -p IPv4 --ip-source @next_node.ip4@ -j DROP
rule OUTPUT --logical-out br-freifunk -o bat0 -p IPv4 --ip-source @next_node.ip4@ -j DROP
rule FORWARD --logical-out br-freifunk -o bat0 -p IPv6 --ip6-destination @next_node.ip6@ -j DROP
rule OUTPUT --logical-out br-freifunk -o bat0 -p IPv6 --ip6-destination @next_node.ip6@ -j DROP
rule FORWARD --logical-out br-freifunk -o bat0 -p IPv6 --ip6-source @next_node.ip6@ -j DROP
rule OUTPUT --logical-out br-freifunk -o bat0 -p IPv6 --ip6-source @next_node.ip6@ -j DROP
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment