From: Marek Lindner <lindner_marek@yahoo.de>
To: b.a.t.m.a.n@lists.open-mesh.org, HeXileD@nixbits.net
Subject: Re: [B.A.T.M.A.N.] Batman-Adv & iptables mac filtering
Date: Tue, 18 Dec 2012 12:02:36 +0800 [thread overview]
Message-ID: <201212181202.37062.lindner_marek@yahoo.de> (raw)
In-Reply-To: <50CFB476.4070207@nixbits.net>
On Tuesday, December 18, 2012 08:10:30 HeXiLeD wrote:
> This is probably a openwrt question but even so it might have some
> impact on batman-adv.
>
> I am planing to use mac filtering through iptables on openwrt with a
> default policy of deny all, allowing only by white list the clients that
> will be allowed t connect.
>
>
> My question to the batman team is if by applying this idea and since
> batman-adv uses MACs to manage the routing; if i will have to white list
> the other router MACs on the router or routers that will be filtering
> MACs with iptables or batman-adv is not affected by mac filtering.
iptables works on layer3. Even though you have a mac address filter option it
will only catch anything if the packet is moved up to layer3 which does not
happen for batman-adv packets. So, iptables will never even see the packets
used by batman-adv.
Cheers,
Marek
next prev parent reply other threads:[~2012-12-18 4:02 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2012-12-18 0:10 [B.A.T.M.A.N.] Batman-Adv & iptables mac filtering HeXiLeD
2012-12-18 4:02 ` Marek Lindner [this message]
2012-12-27 22:59 ` Esteban Municio
2013-01-02 6:45 ` Marek Lindner
2013-01-02 7:41 ` Antonio Quartulli
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=201212181202.37062.lindner_marek@yahoo.de \
--to=lindner_marek@yahoo.de \
--cc=HeXileD@nixbits.net \
--cc=b.a.t.m.a.n@lists.open-mesh.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.