jkimmel
/
firmware
forked from freifunk-franken/firmware
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
firmware/src/packages/fff
History
Johannes Kimmel bd9477a775 fff-firewall: remove obsolete rules 
20-clamp-mss:

Clamping is done in other parts of the network and to a very low static
value. This rules is very likely doing nothing at the moment.

20-filter-ssh:

These rules make use of the conntrack module to ratelimit incoming
connections. Using conntrack comes with a performance penalty for all
traffic. As an alternative, dropbear could be run behind an inetd(-like)
service that does the ratelimit, should removing this rule result in an
actual attack vector.

Removing both rules would enable us to unload the conntrack module all
together, potentially improving overall performance.

Fixes #183

Signed-off-by: Johannes Kimmel <fff@bareminimum.eu>
 		2021-12-21 08:17:12 +01:00
..
alfred-json treewide: use SPDX license identifiers 2021-03-06 18:53:26 +01:00
fff fff: create proper package variants instead of copying file 2021-02-09 22:54:05 +01:00
fff-alfred Unify package URL in fff-packages 2021-11-10 13:42:03 +01:00
fff-alfred-monitoring-proxy Unify package URL in fff-packages 2021-11-10 13:42:03 +01:00
fff-babeld Unify package URL in fff-packages 2021-11-10 13:42:03 +01:00
fff-batman-adv Unify package URL in fff-packages 2021-11-10 13:42:03 +01:00
fff-boardname Unify package URL in fff-packages 2021-11-10 13:42:03 +01:00
fff-config Unify package URL in fff-packages 2021-11-10 13:42:03 +01:00
fff-dhcp fff-dhcp: PKG_RELEASE bump 2021-11-10 13:42:14 +01:00
fff-fastd Unify package URL in fff-packages 2021-11-10 13:42:03 +01:00
fff-firewall fff-firewall: remove obsolete rules 2021-12-21 08:17:12 +01:00
fff-hoods Unify package URL in fff-packages 2021-11-10 13:42:03 +01:00
fff-hoodutils Unify package URL in fff-packages 2021-11-10 13:42:03 +01:00
fff-layer3 fff-layer3-config: add rules for router_ip 2021-12-01 00:06:08 +01:00
fff-layer3-config fff-layer3-config: add rules for router_ip 2021-12-01 00:06:08 +01:00
fff-macnock Unify package URL in fff-packages 2021-11-10 13:42:03 +01:00
fff-mqtt fff-mqtt: Remove unnecessary mosquitto server 2021-12-20 18:51:50 +01:00
fff-mqtt-monitoring packages/fff: Add package fff-mqtt-monitoring 2021-11-10 13:42:14 +01:00
fff-network Drop support for devices with less than 8/64 MB flash/memory 2021-11-28 15:09:42 +01:00
fff-node packages/fff: drop redundant PKG_BUILD_DIR 2021-01-27 20:22:02 +01:00
fff-nodewatcher Unify package URL in fff-packages 2021-11-10 13:42:03 +01:00
fff-ra packages/fff: drop redundant PKG_BUILD_DIR 2021-01-27 20:22:02 +01:00
fff-random Unify package URL in fff-packages 2021-11-10 13:42:03 +01:00
fff-simple-tc packages/fff: drop redundant PKG_BUILD_DIR 2021-01-27 20:22:02 +01:00
fff-support Retain old compat_version for sysupgrade compatibility 2021-11-28 15:09:42 +01:00
fff-sysupgrade Unify package URL in fff-packages 2021-11-10 13:42:03 +01:00
fff-timeserver Unify package URL in fff-packages 2021-11-10 13:42:03 +01:00
fff-uradvd Unify package URL in fff-packages 2021-11-10 13:42:03 +01:00
fff-vpn-select Unify package URL in fff-packages 2021-11-10 13:42:03 +01:00
fff-web-hood Unify package URL in fff-packages 2021-11-10 13:42:03 +01:00
fff-web-mqtt packages/fff: Add package fff-web-mqtt 2021-11-10 13:42:14 +01:00
fff-web-ui Unify package URL in fff-packages 2021-11-10 13:42:03 +01:00
fff-wireguard fff-wireguard: Add missing include for get_mac_label 2021-09-02 17:03:20 +02:00
fff-wireless Drop support for devices with less than 8/64 MB flash/memory 2021-11-28 15:09:42 +01:00