From 9367c1ffe724dfd5032f15ca197d79e75892916f Mon Sep 17 00:00:00 2001
From: Matthias Schiffer <mschiffer@universe-factory.net>
Date: Wed, 14 May 2014 15:08:43 +0200
Subject: [PATCH] gluon-next-node: convert pregenerated ebtables rules to Lua
code
---
package/gluon-next-node/Makefile | 1 -
.../files/lib/gluon/ebtables/250-next-node | 17 +++++++++++++++++
.../generate/lib/gluon/ebtables/250-next-node | 14 --------------
3 files changed, 17 insertions(+), 15 deletions(-)
create mode 100644 package/gluon-next-node/files/lib/gluon/ebtables/250-next-node
delete mode 100644 package/gluon-next-node/generate/lib/gluon/ebtables/250-next-node
diff --git a/package/gluon-next-node/Makefile b/package/gluon-next-node/Makefile
index 0edcec649..ee0e0920a 100644
--- a/package/gluon-next-node/Makefile
+++ b/package/gluon-next-node/Makefile
@@ -30,7 +30,6 @@ endef
define Package/gluon-next-node/install
$(CP) ./files/* $(1)/
- $(GLUON_GENERATE) ./generate/* $(1)/
endef
$(eval $(call BuildPackage,gluon-next-node))
diff --git a/package/gluon-next-node/files/lib/gluon/ebtables/250-next-node b/package/gluon-next-node/files/lib/gluon/ebtables/250-next-node
new file mode 100644
index 000000000..6b9588f7c
--- /dev/null
+++ b/package/gluon-next-node/files/lib/gluon/ebtables/250-next-node
@@ -0,0 +1,17 @@
+local site = require 'gluon.site_config'
+local next_node = site.next_node
+
+rule('FORWARD --logical-out br-client -o bat0 -d ' .. next_node.mac .. ' -j DROP')
+rule('OUTPUT --logical-out br-client -o bat0 -d ' .. next_node.mac .. ' -j DROP')
+rule('FORWARD --logical-out br-client -o bat0 -s ' .. next_node.mac .. ' -j DROP')
+rule('OUTPUT --logical-out br-client -o bat0 -s ' .. next_node.mac .. ' -j DROP')
+
+rule('FORWARD --logical-out br-client -o bat0 -p IPv4 --ip-destination ' .. next_node.ip4 .. ' -j DROP')
+rule('OUTPUT --logical-out br-client -o bat0 -p IPv4 --ip-destination ' .. next_node.ip4 .. ' -j DROP')
+rule('FORWARD --logical-out br-client -o bat0 -p IPv4 --ip-source ' .. next_node.ip4 .. ' -j DROP')
+rule('OUTPUT --logical-out br-client -o bat0 -p IPv4 --ip-source ' .. next_node.ip4 .. ' -j DROP')
+
+rule('FORWARD --logical-out br-client -o bat0 -p IPv6 --ip6-destination ' .. next_node.ip6 .. ' -j DROP')
+rule('OUTPUT --logical-out br-client -o bat0 -p IPv6 --ip6-destination ' .. next_node.ip6 .. ' -j DROP')
+rule('FORWARD --logical-out br-client -o bat0 -p IPv6 --ip6-source ' .. next_node.ip6 .. ' -j DROP')
+rule('OUTPUT --logical-out br-client -o bat0 -p IPv6 --ip6-source ' .. next_node.ip6 .. ' -j DROP')
diff --git a/package/gluon-next-node/generate/lib/gluon/ebtables/250-next-node b/package/gluon-next-node/generate/lib/gluon/ebtables/250-next-node
deleted file mode 100644
index 7595df290..000000000
--- a/package/gluon-next-node/generate/lib/gluon/ebtables/250-next-node
+++ /dev/null
@@ -1,14 +0,0 @@
-rule 'FORWARD --logical-out br-client -o bat0 -d @next_node.mac@ -j DROP'
-rule 'OUTPUT --logical-out br-client -o bat0 -d @next_node.mac@ -j DROP'
-rule 'FORWARD --logical-out br-client -o bat0 -s @next_node.mac@ -j DROP'
-rule 'OUTPUT --logical-out br-client -o bat0 -s @next_node.mac@ -j DROP'
-
-rule 'FORWARD --logical-out br-client -o bat0 -p IPv4 --ip-destination @next_node.ip4@ -j DROP'
-rule 'OUTPUT --logical-out br-client -o bat0 -p IPv4 --ip-destination @next_node.ip4@ -j DROP'
-rule 'FORWARD --logical-out br-client -o bat0 -p IPv4 --ip-source @next_node.ip4@ -j DROP'
-rule 'OUTPUT --logical-out br-client -o bat0 -p IPv4 --ip-source @next_node.ip4@ -j DROP'
-
-rule 'FORWARD --logical-out br-client -o bat0 -p IPv6 --ip6-destination @next_node.ip6@ -j DROP'
-rule 'OUTPUT --logical-out br-client -o bat0 -p IPv6 --ip6-destination @next_node.ip6@ -j DROP'
-rule 'FORWARD --logical-out br-client -o bat0 -p IPv6 --ip6-source @next_node.ip6@ -j DROP'
-rule 'OUTPUT --logical-out br-client -o bat0 -p IPv6 --ip6-source @next_node.ip6@ -j DROP'
--
GitLab