#!/bin/sh
# LinkLocal "fe80::/64" | "fe80::/10"
local network="$network;${net6}"

# ruleOut	: iptables -t filter -A OUTPUT   -o ""$eth"" -j ""$rulesOut""
# ruleIn	: iptables -t filter -A INPUT    -i ""$eth"" -j ""$rulesIn""
# dropOut	: iptables -t filter -A OUTPUT   -o ""$eth"" -j ""$rulesOut""
# dropIn	: iptables -t filter -A INPUT    -i ""$eth"" -j ""$rulesIn""

for subnet in "fe80::/10";do
#for subnet in $(echo "$network" | tr -s ';' ' ');do
 # === TYPE 133 : Router Solicitation
 #NETFILTER6_INPUTIN=enx2887ba045465 OUT= MAC=33:33:00:00:00:02:22:fd:7a:17:ed:2e:86:dd SRC=fe80:0000:0000:0000:081a:36e8:7dee:7a17
 # DST=ff02:0000:0000:0000:0000:0000:0000:0002 LEN=56 TC=0 HOPLIMIT=255 FLOWLBL=986368 PROTO=ICMPv6 TYPE=133 CODE=0 MARK=0xa
 local  dropIn="$dropIn ;icmp	| -s "${subnet}" -d ff02::2/128	-p icmpv6 --icmpv6-type 133/0 -m hl --hl-eq 255"
done
# clients	: PROTO ; PORT ; UID/GID ; UID/GID ; UID/GID .... |
# servers	: PROTO ; PORT ; UID/GID ; UID/GID ; UID/GID .... |
# forward	: PROTO ; PORT |

#				-- CLIENT --
# apprentissage ipv6
#local clients="$clients|UDP	;0:65535	;root/root"
#local clients="$clients|TCP	;0:65535	;root/root"

#				-- SERVER --
#local servers="$servers|UDP	;0:65535	;root/root"
#local servers="$servers|TCP	;0:65535	;root/root"

# TYPE 130 : Multicast Listener Query
#local  ruleIn="$ruleIn ;icmp	| -d ff02::/16 -s "${ip6}" -p icmpv6 --icmpv6-type 130/0"