packages/net/bcp38/files, branch masterMirror of packages feedhttps://git.openwrt.org/feed/packages/atom?h=master2025-05-14T14:58:11Znet/bcp38: Add cgnat shared space to bcp38 list2025-05-14T14:58:11ZAndris PE2025-05-13T17:46:15Zurn:sha1:d63d5c202ae803d0f8f5952d4c321098f407cf09
Add CG-NAT address space to non-routable list
Mmake dhcp filter stricter
Signed-off-by: Andris PE <neandris@gmail.com>
bcp38: migrate to nftables2022-11-16T13:31:30ZStefan Brusch2022-11-15T15:26:38Zurn:sha1:471ffdd98c3a543e4935c3e76ac19301ac16c52d
Signed-off-by: Stefan Brusch <ne20002@gmx.ch>
bcp38: Allow class-e through bcp382019-02-03T15:38:32ZDave Taht2019-01-19T16:51:40Zurn:sha1:e5910b9834535d1b7559448cf7ebae041a3a8ca5
It is increasingly likely 240/4 and 0/8 netblocks will be allocated as
unicast globally rout-able and reachable address space
240/4 is already enabled throughout linux and openwrt.
Permit these address blocks under bcp38 address validation, ie. remove
those ranges from the block list:
list match '0.0.0.0/8' # RFC 1700
list match '240.0.0.0/4' # RFC 5745
Signed-off-by: Dave Taht <dave.taht@gmail.com>
[bump package - minor tweaks to commit message - remove commented lines]
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
bcp38: add init script2018-04-19T09:02:10ZJo-Philipp Wich2018-04-19T07:04:30Zurn:sha1:a6ea246cb2d9ae185200b1479af71a4acb75e541
This commit adds a simple procd init script for bcp38 with the sole purpose
to register a configuration change trigger for /etc/config/bcp38.
The change will allow for automatic firewall reloads triggered by invoking
/sbin/reload_config or through ubus config change events emitted by LuCI.
With the init script in place and started, calling
ubus call service event '{"type":"config.change","data":{"package":"bcp38"}}'
or
/sbin/reload_config
will issue an /etc/init.d/firewall reload if /etc/config/bcp38 has been
modified since the last reload_config call.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
bcp38: iptables 1.6.1 compatibility (#4248)2017-04-12T08:34:02ZKevin Darbyshire-Bryant2017-04-12T08:34:02Zurn:sha1:d30e249d4c7d9c3654059074decd643c1a4839e7
-m state has been removed, now use -m conntrack --ctstate
Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>bcp38: Add note about IPv6 to package description and help text2017-01-08T18:50:50ZToke Høiland-Jørgensen2017-01-08T18:50:50Zurn:sha1:3b73eb19b05ac6c0b75a1ddb6f70a5a8d0c92b2f
Fixes #3793.
BCP38: don't slow down established connections (#2838)2016-06-12T13:09:05ZTörök Edwin2016-06-12T13:09:05Zurn:sha1:0b2b462ae0ff78b25704eb06f5a36f5105082e0f
Enabling BCP38 causes an iptables rule to be inserted before this rule:
ACCEPT all -- anywhere anywhere ID:66773300 ctstate RELATED,ESTABLISHED
This makes all forwarded packets go through the BCP38 ipset match, which slows
down download speed from 440 Mbit/s to 340 Mbit/s.
Only apply BCP38 match rules if state is NEW.
Bump package version.
Signed-off-by: Török Edwin <edwin@skylable.com>Change default bcp38 interface to be eth1, don't enable by default.2014-11-05T19:36:08ZToke Høiland-Jørgensen2014-11-05T19:35:32Zurn:sha1:40b2a8bd1a51e7f1b46fa24d0ad25dbde026be13Add BCP38 implementation package (from CeroWrt).2014-11-04T23:17:53ZToke Høiland-Jørgensen2014-11-04T23:17:53Zurn:sha1:0a387855928f565f86e8a336c5575744a258777c
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>