T-X

Changelog v2: * added necessary firewall rules for the brmldp0 interface through `package/gluon-mesh-batman-adv-brmldproxy/luasrc/lib/gluon/upgrade/400-brmldproxy-firewall` (not much, as the `tc` rules that are set up by `brmldproxy` are applied before iptables)

Changelog v3: * Added a patch / config option to batman-adv to forward MLD reports only to multicast routers instead of always flooding MLD reports, to further reduce overhead. *...

As discussed during the Gluon meeting back then it would be great to gather a bit of real world experiences with it. I've now prepared some packages with all the...

With the last firmware update at Freifunk Lübeck the latest gluon-batman-adv-next package feed was rolled out, with brmldproxy integration and the latest batman-adv release (v2024.0). So far we didn't notice...

Two more notes / observations thanks to @ecsv : 1) When "filter_membership_reports=true" if we were adding brmldproxy by default, I wanted people to think/check what they actually want: I wanted...

Changelog v4: * rebased to current master * added option to also use filter_membership_reports=false * for this removed the static bpfcountd UCI config file and generate it via a Gluon...

Changelog v5: * rebased to current master (no conflicts) * removed the patch "gluon-mesh-batman-adv-brmldproxy: add to mesh-batman-adv-15 by default" to not add brmldproxy by default with batman-adv * /etc/hotplug.d/iface/50-gluon-mesh-batman-adv-brmldproxy: *...

Especially as the dnsmasq code quality is quite... bad in my opinion... And we still have an open segfault in it. So sounds like a very good idea.

In my opinion for a Freifunk like open community network does not make much sense. But for a centrally administrated, mesh encrypted one could be. The PR looks incomplete though....

@andycandy-de thanks for your input! I'm appreciating your concerns and thoughts to make internet access more secure for ordinary, everyday users. And yes, client isolation could reduce a potential attack...