From d6921402c68d63a7dc3d2770beb347b4b80635bc Mon Sep 17 00:00:00 2001 From: Nils Schneider Date: Mon, 16 Mar 2015 19:17:40 +0100 Subject: [PATCH] ebtables-filter-mcast: drop ARPs to/from 0.0.0.0 Fixes https://github.com/freifunk-gluon/gluon/issues/311 --- .../files/lib/gluon/ebtables/110-mcast-allow-arp | 2 ++ 1 file changed, 2 insertions(+) diff --git a/gluon/gluon-ebtables-filter-multicast/files/lib/gluon/ebtables/110-mcast-allow-arp b/gluon/gluon-ebtables-filter-multicast/files/lib/gluon/ebtables/110-mcast-allow-arp index 1083966..8af1900 100644 --- a/gluon/gluon-ebtables-filter-multicast/files/lib/gluon/ebtables/110-mcast-allow-arp +++ b/gluon/gluon-ebtables-filter-multicast/files/lib/gluon/ebtables/110-mcast-allow-arp @@ -1 +1,3 @@ +rule 'MULTICAST_OUT -p ARP --arp-opcode Reply --arp-ip-src 0.0.0.0 -j DROP' +rule 'MULTICAST_OUT -p ARP --arp-opcode Request --arp-ip-dst 0.0.0.0 -j DROP' rule 'MULTICAST_OUT -p ARP -j RETURN'