search

sudomesh / sudowrt-firmware

Scripts to build the sudo mesh OpenWRT firmware.
Other
73 stars 19 forks source link

deal with rogue dhcp servers #67

Closed Juul closed 8 years ago

Juul commented 8 years ago

Can we just block DHCP response packets other than the ones from home nodes?

max-b commented 8 years ago

@Juul - This would be at the home node right? I think we'd need ebtables for this right? Because we're talking about preventing forwarding, not routing.

It looks like ebtables isn't included in openwrt by default because of performance implications: https://forum.openwrt.org/viewtopic.php?pid=94379#p94379

But that post is from 2009 - I'm not sure if it's still an issue. I'll look into installing it and seeing how it might work.

max-b commented 8 years ago

Ok between 0d5fe8d39a4196aba5f07d9bf294525931eb8440 and https://github.com/sudomesh/makenode/commit/c330dc4c9ced3c785232aa7bfc6da214d3268611 I think this is done.