diff --git a/docs/index.rst b/docs/index.rst
index 692b2e509ee703979194285bb72746ef29c2b18e..445f9973986f8ea6ac752a290e2c6bcd6a9306e1 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -50,6 +50,8 @@ Packages
    :maxdepth: 1
 
    package/gluon-client-bridge
+   package/gluon-ebtables-filter-multicast
+   package/gluon-ebtables-filter-ra-dhcp
 
 Releases
 --------
diff --git a/docs/package/gluon-ebtables-filter-multicast.rst b/docs/package/gluon-ebtables-filter-multicast.rst
new file mode 100644
index 0000000000000000000000000000000000000000..fa9f2d50b02c43843ef4e11ba8ecbfaed58551ba
--- /dev/null
+++ b/docs/package/gluon-ebtables-filter-multicast.rst
@@ -0,0 +1,30 @@
+gluon-ebtables-filter-multicast
+===============================
+
+The *gluon-ebtables-filter-multicast* package filters out various kinds of
+non-essential multicast traffic, as this traffic often constitutes a
+disproportionate burden on the mesh network. Unfortunately, this breaks many useful services
+(Avahi, Bonjour chat, ...), but this seems unavoidable, as the current Avahi implementation is
+optimized for small local networks and causes too much traffic in lange mesh networks.
+
+The multicast packets are filtered between the nodes' client bridge (*br-client*) and mesh
+interface (*bat0*) on output.
+
+
+The following packet types are considered essential and aren't filtered:
+
+* ARP (except requests for/replies from 0.0.0.0)
+* DHCP, DHCPv6
+* ICMPv6 (except Echo Requests (ping) and Node Information Queries (RFC4620)
+* IGMP
+
+In addition, the following packet types are allowed to allow experimentation with
+layer 3 routing protocols.
+
+* Babel
+* OSPF
+* RIPng
+
+The following packet types are also allowed:
+
+* BitTorrent Local Peer Discovery (it seems better to have local peers for BitTorrent than sending everything through the internet)
diff --git a/docs/package/gluon-ebtables-filter-ra-dhcp.rst b/docs/package/gluon-ebtables-filter-ra-dhcp.rst
new file mode 100644
index 0000000000000000000000000000000000000000..539fbc0d1abfb4a2e8ef0fdba065a4d7478bc6ac
--- /dev/null
+++ b/docs/package/gluon-ebtables-filter-ra-dhcp.rst
@@ -0,0 +1,13 @@
+gluon-ebtables-filter-ra-dhcp
+=============================
+
+The *gluon-ebtables-filter-ra-dhcp* package tries to prevent common
+misconfigurations (i.e. connecting the client interface of a Gluon
+node to a private network) from causing issues for either of the
+networks.
+
+The rules are the following:
+
+* DHCP requests, DHCPv6 requests and Router Solicitations may only be sent from clients to the mesh, but aren't forwarded
+  from the mesh to clients
+* DHCP replies, DHCPv6 replies and Router Advertisements from clients aren't forwarded to the mesh