[Cerowrt-devel] BCP38 implementation

Toke Høiland-Jørgensen toke at toke.dk
Thu Mar 20 05:29:58 EDT 2014


Did an updated version that now has it's own configuration tab under
the firewall settings, so no need to patch the firewall .lua file. Also,
it is now possible to configure the subnets that are blocked and
whitelisted.

To try the new version, install these packages:

http://archive.tohojo.dk/cerowrt/wndr/3.10.32-9-tohojo/packages/bcp38_3-1_ar71xx.ipk
http://archive.tohojo.dk/cerowrt/wndr/3.10.32-9-tohojo/packages/luci-app-bcp38_1-1_all.ipk

and add the firewall rules as per the previous email.

Still a couple of issues:

- Manual firewall rules are still required. I think it would probably be
  better to insert the iptables rules from the script directly so they
  don't have to be specified in the firewall config file.

- Still need to have a hotplug script auto-detect blocked upstream
  networks and exclude them.

-Toke
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 489 bytes
Desc: not available
URL: <https://lists.bufferbloat.net/pipermail/cerowrt-devel/attachments/20140320/86ddfd60/attachment.sig>


More information about the Cerowrt-devel mailing list