bcp38: Add note about IPv6 to package description and help text

Fixes #3793.
This commit is contained in:
Toke Høiland-Jørgensen 2017-01-08 19:50:50 +01:00
parent dd863860ef
commit 3b73eb19b0
4 changed files with 14 additions and 4 deletions

View File

@ -7,7 +7,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=bcp38
PKG_VERSION:=5
PKG_RELEASE:=1
PKG_RELEASE:=2
PKG_LICENCE:=GPL-3.0+
include $(INCLUDE_DIR)/package.mk
@ -23,7 +23,11 @@ define Package/bcp38
endef
define Package/bcp38/description
bcp38 implements IETF BCP38 for home routers. See https://tools.ietf.org/html/bcp38.
bcp38 implements IETF BCP38 for home routers.
See https://tools.ietf.org/html/bcp38.
This package provides BCP38 for IPv4 only - IPv6 uses source
specific default routes, so no firewall configuration is needed.
endef
define Package/bcp38/conffiles

View File

@ -17,6 +17,10 @@ config bcp38
# There is a dhcp trigger to do this for the netmask of a
# double natted connection needed
# You can only specify IPv4 addresses here - for IPv6, only source
# specific default routes will be installed, which achieves the same
# without needing any firewall routes.
# I will argue that this level of indirection doesn't scale
# very well - see how to block china as an example
# http://www.okean.com/china.txt

View File

@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=luci-app-bcp38
PKG_VERSION:=2
PKG_RELEASE:=1
PKG_RELEASE:=2
PKG_LICENSE:=Apache-2.0
LUCI_DIR:=/usr/lib/lua/luci

View File

@ -19,7 +19,9 @@ local ifaces = net:get_interfaces()
m = Map("bcp38", translate("BCP38"),
translate("This function blocks packets with private address destinations " ..
"from going out onto the internet as per " ..
"<a href=\"http://tools.ietf.org/html/bcp38\">BCP 38</a>."))
"<a href=\"http://tools.ietf.org/html/bcp38\">BCP 38</a>. " ..
"For IPv6, only source specific default routes are installed, so " ..
"no BCP38 firewall routes are needed."))
s = m:section(TypedSection, "bcp38", translate("BCP38 config"))
s.anonymous = true