summaryrefslogtreecommitdiff
path: root/meta-google/recipes-google/ncsi/files/gbmc-ncsi-nft.sh.in
AgeCommit message (Collapse)AuthorFilesLines
2021-11-06meta-google: gbmc-ncsi-config: Ignore deprecated addressesWilliam A. Kennington III1-1/+2
We plan to use deprecated addresses to allow for neighbor discovery, but they will be ignored by networkd and this script as to prevent misconfiguration. Change-Id: Ibc0bee71c19add79f05b5ce58b34d3175e2f6fbd Signed-off-by: William A. Kennington III <wak@google.com>
2021-11-06meta-google: gbmc-bridge: Restrict network from /72 to /76William A. Kennington III1-3/+3
We can have multiple gBMC networks within one "machine". This allows us to have multiple address sets. Change-Id: I5b18b7822f50bb0570e1aa5a70ac47036694d922 Signed-off-by: William A. Kennington III <wak@google.com>
2021-09-16gbmc-ncsi-config: Fix nftables rule writingWilliam A. Kennington III1-1/+2
The `pfx` variable was not correctly being initialized Change-Id: Iafc0a2ca8dbfe943a9bc8c1649ae68fb00d267a1 Signed-off-by: William A. Kennington III <wak@google.com>
2021-05-12meta-google: gbmc-ncsi-nft: More forward restrictionWilliam A. Kennington III1-0/+5
We only want to allow <pfx>::fd... traffic info the machine area network from the outside world. Instead of just blocking internal network addresses from the outside, explicitly look at the prefix. Change-Id: Id0afef7c813aef381e81b8fcfb570778f529f5dc Signed-off-by: William A. Kennington III <wak@google.com>
2021-05-11meta-google: gbmc-bridge: Remove custom ip parsing logicWilliam A. Kennington III1-13/+14
Change-Id: I455ab70094cfdc79b38097a838051f51b3c852da Signed-off-by: William A. Kennington III <wak@google.com>
2021-05-07meta-google: gbmc-ncsi-config: Restrict NCSI input packetsWilliam A. Kennington III1-0/+95
Break down packets by their incoming address and ensure that we don't allow packets to unintended destinations. Right now this is effectively a no-op, but it will be necessary for BMC public addressing. Change-Id: I39c16c3b9cd4c293df42b928674e39677d7834e9 Signed-off-by: William A. Kennington III <wak@google.com>