Skip to content
Snippets Groups Projects
  1. Sep 10, 2016
  2. Sep 09, 2016
  3. Sep 07, 2016
  4. Sep 05, 2016
  5. Aug 30, 2016
  6. Aug 28, 2016
  7. Aug 27, 2016
  8. Aug 22, 2016
  9. Jul 29, 2016
  10. Jul 27, 2016
  11. Jul 10, 2016
  12. Jun 17, 2016
  13. May 29, 2016
  14. May 26, 2016
  15. May 23, 2016
  16. May 22, 2016
  17. May 20, 2016
    • Linus Lüssing's avatar
      ebtables-segment-mld: Segment IGMP/MLD domain · 4199b216
      Linus Lüssing authored
      
      This patch adds a new gluon-ebtables package to filter IGMP/MLD messages
      via ebtables.
      
      For one thing this reduces multicast overhead: About one third of all
      ICMPv6 multicast traffic in Lübeck or Hamburg is MLD.
      
      Furthermore it removes a potential Distributed Denial-of-Service vector
      (see Gluon ticket #553).
      
      Finally, it is a prerequisite for enabling bridge multicast snooping in
      a decentral and robust fashion.
      
      Note that IGMP/MLD are filtered for multicast traffic coming from
      the mesh, too (new MULTICAST_IN), as unfortunately there seem to
      be other queriers somewhere in the mesh at least for Freifunk
      Lübeck. Also adding these rules to be prepared to anyone intentionally
      or unintentionally disabling these filters on his/her node.
      
      Node operators not running Gluon (for instance gateway nodes) should
      make sure to either enable multicast_router towards bat0 or disable
      multicast snooping entirely if they have a bridge on top of bat0.
      
      Signed-off-by: default avatarLinus Lüssing <linus.luessing@c0d3.blue>
      4199b216
  18. May 16, 2016
  19. May 06, 2016
  20. Apr 29, 2016
  21. Apr 27, 2016
  22. Apr 22, 2016
  23. Apr 19, 2016
Loading