gluon-ebtables-source-filter

The gluon-ebtables-source-filter package adds an additional layer-2 filter ruleset to prevent unreasonable traffic entering the network via the nodes. Unreasonable means traffic entering the mesh via a node which source IP does not belong to the configured IP space.

You may first check if there is a certain proportion of unreasonable traffic, before adding this package to the firmware image. Furthermore, you should not use this package if some kind of gateway or upstream network is provided by a device connected to the client port.

site.conf

prefix4optional

• IPv4 subnet

prefix6 :

• IPv6 subnet

extra_prefixes6optional

• list of additional IPv6 subnets

Example:

prefix4 = '198.51.100.0/21',
prefix6 = '2001:db8:8::/64',
extra_prefixes6 = {
  '2001:db8:9::/64',
  '2001:db8:100::/60',
},