Re: [OpenWrt-Devel] [patch] disable bridge firewalling in sysctl.conf by default

2009-08-13 Thread Jo-Philipp Wich
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > P.S.: > Where can I find the definition (.config, documentation, etc.) what has > to be enabled in a release build? Take a look at http://downloads.openwrt.org/kamikaze/8.09.1/ . The architecture folders contain the used .config . The script used t

Re: [OpenWrt-Devel] [patch] disable bridge firewalling in sysctl.conf by default

2009-08-13 Thread Matthias Buecher / Germany
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 13.08.2009 16:53, Matthias Buecher / Germany wrote: > On 13.08.2009 14:57, Jo-Philipp Wich wrote: >> Hi. > >>> Maybe it's indeed best to enable it in the kernel konfig, and disable >>> by sysctl, as Matthias suggests. >> Enabling the bridge filteri

Re: [OpenWrt-Devel] [patch] disable bridge firewalling in sysctl.conf by default

2009-08-13 Thread Matthias Buecher / Germany
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 13.08.2009 14:57, Jo-Philipp Wich wrote: > Hi. > >> Maybe it's indeed best to enable it in the kernel konfig, and disable >> by sysctl, as Matthias suggests. > > Enabling the bridge filtering in the kernel could have severe > performance impact si

Re: [OpenWrt-Devel] [patch] disable bridge firewalling in sysctl.conf by default

2009-08-13 Thread Jo-Philipp Wich
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi. > Maybe it's indeed best to enable it in the kernel konfig, and disable > by sysctl, as Matthias suggests. Enabling the bridge filtering in the kernel could have severe performance impact since all packets will be routed through the bridge layer

Re: [OpenWrt-Devel] [patch] disable bridge firewalling in sysctl.conf by default

2009-08-13 Thread Ferenc Wagner
Matthias Buecher / Germany writes: > On 13.08.2009 11:08, Ferenc Wagner wrote: >> Matthias Buecher / Germany writes: >> >>> The bridge firewalling is caused by CONFIG_BRIDGE_NETFILTER=y (bool), >>> which is enabled by kmod-ebtables. As it is bool it can not be >>> outsourced into an installable

Re: [OpenWrt-Devel] [patch] disable bridge firewalling in sysctl.conf by default

2009-08-13 Thread Jerome Benoit
Le Thu, 13 Aug 2009 10:10:18 +0200, Florian Fainelli a écrit : > Supposing that you are using a 2.6 kernel, the IPv6 Neighbor > Discovery mechanism is by far the best way to provide IPv6 > connectivity to devices behind your Free-connected router. For 2.6, yes via the NDP sysctl (but 2.6 is not

Re: [OpenWrt-Devel] [patch] disable bridge firewalling in sysctl.conf by default

2009-08-13 Thread Matthias Buecher / Germany
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 13.08.2009 01:39, Matthias Buecher / Germany wrote: > > Matthias "Maddes" Bücher > http://www.maddes.net/ > Home: Earth / Germany / Ruhr-Area > > On 12.08.2009 21:13, Matthias Buecher / Germany wrote: >> On 12.08.2009 14:56, Matthias Buecher / Ger

Re: [OpenWrt-Devel] [patch] disable bridge firewalling in sysctl.conf by default

2009-08-13 Thread Matthias Buecher / Germany
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 13.08.2009 11:08, Ferenc Wagner wrote: > Matthias Buecher / Germany writes: > >> The bridge firewalling is caused by CONFIG_BRIDGE_NETFILTER=y (bool), >> which is enabled by kmod-ebtables. As it is bool it can not be >> outsourced into an installa

Re: [OpenWrt-Devel] [patch] disable bridge firewalling in sysctl.conf by default

2009-08-13 Thread Ferenc Wagner
Matthias Buecher / Germany writes: > The bridge firewalling is caused by CONFIG_BRIDGE_NETFILTER=y (bool), > which is enabled by kmod-ebtables. As it is bool it can not be > outsourced into an installable module. I wonder why it isn't possible to avoid loading ebtables... But can't check now, I

Re: [OpenWrt-Devel] [patch] disable bridge firewalling in sysctl.conf by default

2009-08-13 Thread Florian Fainelli
Le Wednesday 12 August 2009 22:37:41 Jerome Benoit, vous avez écrit : > Le Wed, 12 Aug 2009 21:13:16 +0200, > > Matthias Buecher / Germany a écrit : > > Another solution would be to compile it as a separate module > > (BRIDGE=m). Then the user can decide if he want to install it or not. > > Yes pl

Re: [OpenWrt-Devel] [patch] disable bridge firewalling in sysctl.conf by default

2009-08-12 Thread Matthias Buecher / Germany
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matthias "Maddes" Bücher http://www.maddes.net/ Home: Earth / Germany / Ruhr-Area On 12.08.2009 21:13, Matthias Buecher / Germany wrote: > On 12.08.2009 14:56, Matthias Buecher / Germany wrote: >> On 12.08.2009 10:50, Ferenc Wagner wrote: >>> Matthia

Re: [OpenWrt-Devel] [patch] disable bridge firewalling in sysctl.conf by default

2009-08-12 Thread Matthias Buecher / Germany
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12.08.2009 22:37, Jerome Benoit wrote: > Le Wed, 12 Aug 2009 21:13:16 +0200, > Matthias Buecher / Germany a écrit : > >> Another solution would be to compile it as a separate module >> (BRIDGE=m). Then the user can decide if he want to install it

Re: [OpenWrt-Devel] [patch] disable bridge firewalling in sysctl.conf by default

2009-08-12 Thread Jerome Benoit
Le Wed, 12 Aug 2009 21:13:16 +0200, Matthias Buecher / Germany a écrit : > Another solution would be to compile it as a separate module > (BRIDGE=m). Then the user can decide if he want to install it or not. Yes please do so. IPv6 connectivity can be bridged cleanly, it's what most French openw

Re: [OpenWrt-Devel] [patch] disable bridge firewalling in sysctl.conf by default

2009-08-12 Thread Matthias Buecher / Germany
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12.08.2009 14:56, Matthias Buecher / Germany wrote: > On 12.08.2009 10:50, Ferenc Wagner wrote: >> Matthias Buecher / Germany writes: > >>> When compiling a kernel prepared for all packages, then bridge >>> firewalling is enabled inside the kernel

Re: [OpenWrt-Devel] [patch] disable bridge firewalling in sysctl.conf by default

2009-08-12 Thread Matthias Buecher / Germany
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12.08.2009 10:50, Ferenc Wagner wrote: > Matthias Buecher / Germany writes: > >> When compiling a kernel prepared for all packages, then bridge >> firewalling is enabled inside the kernel. > > Rather, I think you get the "problem" when you start

Re: [OpenWrt-Devel] [patch] disable bridge firewalling in sysctl.conf by default

2009-08-12 Thread Ferenc Wagner
Matthias Buecher / Germany writes: > When compiling a kernel prepared for all packages, then bridge > firewalling is enabled inside the kernel. Rather, I think you get the "problem" when you start the firewall. > This leads to "unexpected" behaviour for newbies and normal users: they > can not

[OpenWrt-Devel] [patch] disable bridge firewalling in sysctl.conf by default

2009-08-11 Thread Matthias Buecher / Germany
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 When compiling a kernel prepared for all packages, then bridge firewalling is enabled inside the kernel. This leads to "unexpected" behaviour for newbies and normal users: they can not access other devices on the LAN. Therefore disable bridge firewalli