Commits on Source (2)
-
Matthias Schiffer authored
An incorrectly connected node may send wired-mesh packets to another node's client port. For raw batman-adv, such frames are filtered by batman-adv, but this does not work with VXLAN encapsulation. While such packets are not flooded through the mesh because of the batman-adv noflood flag, they may still reach another node that is connected in the same incorrect way, which could result in loops and other connectivity issues. Filter out packets sent to our VXLAN multicast group address to avoid such problems. Fixes #3025
-
Matthias Schiffer authored
gluon-ebtables-filter-multicast: block packets with Gluon VXLAN multicast destination