aredn/files/etc/local/mesh-firewall
Tim Wilkinson a494a8c374
Supernode support (#938)
* Supernode option

* Change supernode 10/8 route injection.
Identify supernode in sysinfo.json

* Supernode tunnels use port 5526

* Advertise supernode-ness

* Update DNS if supernodes are available

* Open up supernodes DNS service to incoming mesh requests

* Simply nameserver update

* Support supernodes on hap ac2

* Improve supernode nameserver update reliability

* Rework how supernode nameservers are managed

* Improve supernode dns advertising

* Add super mesh button

* User supernode name not ip in advert

* Less intustive way to identify supernode dns

* Add supernode ignore options
Change supernode enabled -> enable

* Improve DNS updates

* Remove tunnels when switching to/from supernode mode

* Blackhole any unknown routes on the supernode to avoid recursing packets

* Add explicit reverse lookup rule for supernode when available

* Just use dnsmasq changes for both forward and reverse names

* Improve supernode detection
So it doesnt keep writing to flash

* Add reverse tunnel ip lookup to supernode

* enabled => enable

* Supernode tunnels start 172.30

* Remove supernode switch

* Simplify supernode check

* Fix nav test
2023-09-19 20:06:09 -07:00
..
01-tunnels Remove firewall counters except for specific ports 2023-01-24 23:16:42 -08:00
03-dhcp-wan-block Block DHCP server traffic from every going to the WAN interface 2023-03-23 23:06:42 -04:00
05-xlink Remove firewall counters except for specific ports 2023-01-24 23:16:42 -08:00
10-lan-to-wan Remove firewall counters except for specific ports 2023-01-24 23:16:42 -08:00
12-wan-services Allow SSH, WEB and TELNET access to be disabled on WAN (enabled by default) (#903) 2023-07-18 22:52:41 -07:00
13-supernode-rules Supernode support (#938) 2023-09-19 20:06:09 -07:00
21-lqm Remove firewall counters except for specific ports 2023-01-24 23:16:42 -08:00
59-custom-rules Update AREDN to OpenWRT 22.3.2 (Major Upgrade) (#574) 2022-12-22 14:22:49 -06:00
README feature: FirewallIncludes: Add program that will auto include firewall rules that are in a set directory. 2016-01-09 16:24:45 -08:00

README

## This directory includes shell scripts that will be auto executed each time the firewall is reloaded
## Some variables are set in the environment to make checks easier.
## Files should follow the ##-name structure and be marked executable.
## This directory is NOT saved during an OTA Upgrade