Packet Filter V2

[gjelsoe]

Packet Filter Engine

Adds a flexible rule-based packet filter engine to the repeater firmware.

Rules can match on route type, payload type, hop count, path hash size, last-hop repeater, channel hash, SNR and RSSI. Each rule supports an optional AND condition for combined matching. A configurable default policy (allow/drop) applies when no rule matches.

Rules are added disabled by default and must be explicitly enabled. All rules survive reboot via SPIFFS/LittleFS persistence.

New files

• FilterRule.h — rule struct, enums and constants
• FilterParser.h/.cpp — command parser
• ChannelFilter.h/.cpp — rule storage, evaluation, persistence and CLI dispatch

Changes to existing files

• MyMesh.h — added ChannelFilter _filter member and include
• MyMesh.cpp — added _filter.load() in begin(), filter evaluation in filterRecvFloodPacket(), and filter command routing in handleCommand()

CLI

Commands are available over the remote CLI via the filter prefix. See FILTER.md for full command reference and examples.

Testing

A standalone test suite is included in filter_test_suite/. See filter_test_suite/README.md for build instructions.

[Dom4n]

It does what the documentation says it will do. I'm offering prebuilt firmware to test in our meshcore community.

I have created a simple page with documentation (filter.md in different form) and configurator for this functionality:
https://dom4n.github.io/site/rf/meshcore/filters.html

[gjelsoe]

It does what the documentation says it will do. I'm offering prebuilt firmware to test in our meshcore community.

I have created a simple page with documentation (filter.md in different form) and configurator for this functionality: https://dom4n.github.io/site/rf/meshcore/filters.html

All rules are disabled by default, they have to be enabled after being entered.

[Dom4n]

Ah yes, I have added a section that is highlighting this behavior. Thanks for pointing it out.

[xeros]

It would be great to have it merged soon.
It happens there are misconfigured devices in range, which flood everything for whole country and reducing max hops or using regions do not help much to get rid of buggy traffic going through all repeaters.

Do these filters support 2-byte and 3-byte hashes? (to avoid blocking too much)

[gjelsoe]

Do these filters support 2-byte and 3-byte hashes?

Yes, but they can't be mixed in the same line.

[towerviewcams]

Testing for a couple weeks now and also requested a update to add multiple channels in one filter rule. That is working great with 4 channels now in one rule. just like 4 repeaters in one rule.