blob: c92967d5e78ab1447d572c1357767f20a00e7610 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
|
config tcfilter 'global'
option enabled '1'
# One 'rule' section per tc filter. 'spec' is everything that would follow
# tc filter add dev <device> ingress pref <pref>
# i.e. the (optional) protocol, the filter kind and its match, and the action.
#
# 'pref' is required: it is how the rule is removed again on stop/reload.
# 'label' is optional and only used for log messages and the LuCI view.
# Use 'skip_sw' so a match the hardware cannot offload fails loudly instead
# of silently installing in software.
#
# The rules below are disabled examples. Adjust 'device', then set
# 'enabled' to 1.
#
# Drop AVM FRITZ!Box powerline (HomePlug AV / MediaXtream) discovery:
config rule
option label 'Drop-HomePlug-AV (FRITZ!Box)'
option device 'lan1'
option pref '49152'
option spec 'protocol 0x88e1 flower skip_sw action drop'
option enabled '0'
config rule
option label 'Drop-MediaXtream (FRITZ!Box)'
option device 'lan1'
option pref '49153'
option spec 'protocol 0x8912 flower skip_sw action drop'
option enabled '0'
# Drop multicast DNS / service discovery (UDP port 5353), IPv4 and IPv6:
config rule
option label 'Drop-mDNS (IPv4)'
option device 'lan1'
option pref '49154'
option spec 'protocol ip flower ip_proto udp dst_port 5353 skip_sw action drop'
option enabled '0'
config rule
option label 'Drop-mDNS (IPv6)'
option device 'lan1'
option pref '49155'
option spec 'protocol ipv6 flower ip_proto udp dst_port 5353 skip_sw action drop'
option enabled '0'
|
