[ebtables] Add multicast drop rule to ebtables (sonic-net#18064)

Adding rule to ebtables to drop multicast packets in kernel. This was done to address a bug where NS packets were flooding ports with duplicate packets. Signed-off-by: Nikola Dancejic <[email protected]>
mssonicbld · Feb 28, 2024 · 2a5b1c7 · 2a5b1c7
1 parent e220fe7
commit 2a5b1c7
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/files/image_config/ebtables/ebtables.filter.cfg b/files/image_config/ebtables/ebtables.filter.cfg
@@ -8,4 +8,5 @@
 -A FORWARD -d BGA -j DROP
 -A FORWARD -p ARP -j DROP
 -A FORWARD -p 802_1Q --vlan-encap ARP -j DROP
+-A FORWARD -d Multicast -j DROP