Skip to content
Snippets Groups Projects
  1. Sep 21, 2016
  2. Sep 18, 2016
  3. Sep 17, 2016
  4. Sep 11, 2016
  5. Sep 10, 2016
  6. Sep 09, 2016
  7. Sep 07, 2016
  8. Sep 05, 2016
  9. Aug 30, 2016
  10. Aug 28, 2016
  11. Aug 27, 2016
  12. Aug 22, 2016
  13. Jul 29, 2016
  14. Jul 27, 2016
  15. Jul 10, 2016
  16. Jun 17, 2016
  17. May 29, 2016
  18. May 26, 2016
  19. May 23, 2016
  20. May 22, 2016
  21. May 20, 2016
    • Linus Lüssing's avatar
      ebtables-segment-mld: Segment IGMP/MLD domain · 4199b216
      Linus Lüssing authored
      
      This patch adds a new gluon-ebtables package to filter IGMP/MLD messages
      via ebtables.
      
      For one thing this reduces multicast overhead: About one third of all
      ICMPv6 multicast traffic in Lübeck or Hamburg is MLD.
      
      Furthermore it removes a potential Distributed Denial-of-Service vector
      (see Gluon ticket #553).
      
      Finally, it is a prerequisite for enabling bridge multicast snooping in
      a decentral and robust fashion.
      
      Note that IGMP/MLD are filtered for multicast traffic coming from
      the mesh, too (new MULTICAST_IN), as unfortunately there seem to
      be other queriers somewhere in the mesh at least for Freifunk
      Lübeck. Also adding these rules to be prepared to anyone intentionally
      or unintentionally disabling these filters on his/her node.
      
      Node operators not running Gluon (for instance gateway nodes) should
      make sure to either enable multicast_router towards bat0 or disable
      multicast snooping entirely if they have a bridge on top of bat0.
      
      Signed-off-by: default avatarLinus Lüssing <linus.luessing@c0d3.blue>
      4199b216
Loading