firmware/src/packages/fff/fff-firewall/files/usr/lib/firewall.d/00-prepare

######## CLEAN UP ############
ebtables -F
ebtables -X

iptables -F
iptables -X

iptables -t nat -F

ip6tables -F
ip6tables -X
fff-firewall: new package - moves the node<-->client ra rules to package fff-uradvd Signed-off-by: Tim Niemeyer <tim@tn-x.org> Reviewed-by: Tobias Klaus <tk+ff@meskal.net> Reviewed-by: Jan Kraus <mayosemmel@gmail.com> 2016-04-05 21:56:45 +02:00			`######## CLEAN UP ############`
			`ebtables -F`
			`ebtables -X`

			`iptables -F`
			`iptables -X`
fff-firewall: clean up v6 rules on prepare Signed-off-by: Tim Niemeyer <tim@tn-x.org> Reviewed-by: Robert Langhammer <rlanghammer@web.de> Reviewed-by: Christian Dresel <fff@chrisi01.de> Tested-by: Christian Dresel <fff@chrisi01.de> 2018-03-03 21:32:32 +01:00
Add package fff-layer3-ipv4snat With this package it is possible to make SNAT with IPv4 on the router The user must set a peer_ip setting in gateway.meta.peer_ip to get a single ip for peering interfaces. At ipaddr the user must set a ip that not use in babel (e.g. 192.168.0.1/16) for the clients With this package the ipaddr address is SNAT to the peer_ip and every router need only one freifunk ip and can use the same ipaddr on every router. It is a system like cgnat from big provider Signed-off-by: Christian Dresel <freifunk@dresel.systems> 2020-12-24 09:57:25 +01:00			`iptables -t nat -F`

fff-firewall: clean up v6 rules on prepare Signed-off-by: Tim Niemeyer <tim@tn-x.org> Reviewed-by: Robert Langhammer <rlanghammer@web.de> Reviewed-by: Christian Dresel <fff@chrisi01.de> Tested-by: Christian Dresel <fff@chrisi01.de> 2018-03-03 21:32:32 +01:00			`ip6tables -F`
			`ip6tables -X`