Fixes #1311

Fixes #1308

Fixes #1310

The 'auto' attribute still allows enabling the interface using ifup, which
is not intended when wired mesh is disabled.

This enables the ebtables internal locking mechanism which
will avoid race conditions between multiple, concurrent
ebtables calls.

This is a preparation for the upcoming gluon-arp-limiter
daemon, to avoid issues if upon restarting gluon-ebtables
the gluon-arp-limiter daemon tries to modify the tables.

Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>

Signed-off-by: Sven Eckelmann <sven@narfation.org>

Signed-off-by: Sven Eckelmann <sven@narfation.org>

Interacting with batman-adv's genl interface requires some code and
definitions which could be shared between different packages. libbatadv is
trying to do this without providing any guarantee for ABI or API stability.
It is only useful in very controlled environments like gluon.

Signed-off-by: Sven Eckelmann <sven@narfation.org>

batman-adv uses gratuitous ARP packets with certain target addresses for
BLA.

Fixes #1198

As core defines basic rules for this zone, it makes sense to create it
there.

Based-on-patch-by: Christof Schulze <christof.schulze@gmx.net>

OUTPUT is always accepted, no need to allow ICMPv6 explicitly.

Wrap long lines.

 * gluon-core, gluon-client-bridge: introduce new firewall zone: local_client
 * gluon-core: put clients in local_client zone, introduce drop-zone,
   set dns-rules and zones
 * gluon-respondd: allow respondd on mesh
 * gluon-status-page-api: allow http input on mesh and client

Fixes #1269

Filtering by MAC address won't filter out multicast packages like router
solicitations, causing uradvd to send out router advertisements with
maximum frequency (every 3 seconds) in active meshes, even when no local
client is actually interested in the advertisements.

Fixes #1230

by moving the declaration of ret to the top of get_fastd()

The older busybox-based wget erroneously accepted URLs without protocol.
Add validator to avoid building firmwares with broken autoupdates.

Some files have received some additional refactoring.