Packet Filtering
[Manual]
Collaboration diagram for Packet Filtering:
![]() |
Motivation
DES-SERT enables the implementation of routing deamons in an underlay that is transparent to the network layer protocol. As DES-SERT based daemons provide their on routing tables, packet filtering based on, e.g., xtables cannot be used. Only when packets leave the underlay and are handled by the layer 3 protocol of the operating system kernel, xfilter rules can be applied.
In many cases we do not need any sophisticated filtering or mangling. With simple mesh or sys callbacks particular packets can be dropped.
Filters
DES-SERT Extra provides callbacks to drop DES-SERT messages with or without an Ethernet extension, or IPv6 datagrams.
int dessert_sys_drop_ipv6(dessert_msg_t* msg, size_t len, dessert_msg_proc_t *proc, const dessert_sysif_t *sysif, dessert_frameid_t id); int dessert_mesh_drop_ethernet(dessert_msg_t* msg, size_t len, dessert_msg_proc_t *proc, const dessert_meshif_t *meshif, dessert_frameid_t id); int dessert_mesh_drop_ip(dessert_msg_t* msg, size_t len, dessert_msg_proc_t *proc, const dessert_meshif_t *meshif, dessert_frameid_t id);