Byzantium/Byzantium — Issue #86: Expire inactive MACs from the IP tables whitelist.
Author: virtadpt
Created: 2012-01-22 04:14:26+00:00
State: open
Labels: Captive portal, System services

Due to the nature of mobile IP clients can stop associating with one mesh node and associate with another more or less at will. This unfortunately means that IP tables rules for MAC addresses that are no longer within range can potentially pile up and exhaust kernel memory. A cronjob should run every ten minutes or so (the same length of DHCP leases) a figure out which MACs have been inactive for longer than ten minutes and delete their rules.

captive-portal.sh already has the capability to delete single clients from the set of IP tables rules running on a particular node, so we just have to write the logic to determine which rules to delete.