Update nether.rules for multicast IP 96/100096/2
authorjooseong lee <jooseong.lee@samsung.com>
Fri, 25 Nov 2016 06:30:07 +0000 (15:30 +0900)
committerjooseong lee <jooseong.lee@samsung.com>
Wed, 30 Nov 2016 09:43:39 +0000 (18:43 +0900)
commit4eee0042c064d875e955e571fd97ca185f454beb
treee82d8d80639e1aa30b5bcfc31e2af80d729331a5
parent94f317c860ba32ffb3c0b1d87c602d88fe72def3
Update nether.rules for multicast IP

Loopback communication should be allowed only for multicast address range.
In case, iptable will set packet's secmark to 'System' label to avoid
Smack deny issue.

Current -r option is for ipv4. ip6table will be updated on ExecStartPost.

* IPv4
 - '224.0.1.187', IPv4 multicast address for "All CoAP Nodes"
* IPv6
 - 'ff02::', IPv6 multicast address for "All CoAP Nodes", link-local scope
 - 'fe80::ae5a:14ff:fe0e:b2c0', This is only for iotcon provisioning, but
   should be removed.

Change-Id: Ic57d2205f8bb20ece23de4fe48db9d2cbad43ea8
Signed-off-by: jooseong lee <jooseong.lee@samsung.com>
conf/CMakeLists.txt
conf/nether.rules
conf/nether_ipv6.rules [new file with mode: 0644]
conf/systemd/nether.service
conf/systemd/nether.service.in
packaging/nether.spec