secubox-openwrt/package/secubox/secubox-app-mac-guardian/files/etc/config/mac-guardian
CyberMind-FR 2d810a2e95 feat(mac-guardian): Add DHCP lease protection for odhcpd
Prevent odhcpd crashes from MAC randomization causing hostname conflicts,
stale lease pile-up, and lease flooding. Adds hostname dedup, stale lease
cleanup, flood detection, CLI commands, RPC methods, and LuCI dashboard card.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-03 16:22:37 +01:00

36 lines
833 B
Plaintext

config mac-guardian 'main'
option enabled '0'
option debug '0'
option scan_interval '30'
config detection 'detection'
option random_mac '1'
option oui_duplicates '1'
option oui_dup_threshold '5'
option mac_flip '1'
option flip_window '300'
option flip_threshold '10'
option spoof_detection '1'
config enforcement 'enforcement'
option policy 'alert'
option quarantine_vlan ''
option notify_crowdsec '1'
config whitelist 'whitelist'
# list mac 'aa:bb:cc:dd:ee:ff'
# list oui '00:50:E4'
config dhcp_protection 'dhcp'
option enabled '1'
option cleanup_stale '1'
option dedup_hostnames '1'
option flood_threshold '10'
option flood_window '60'
option stale_timeout '3600'
config reporting 'reporting'
option stats_file '/var/run/mac-guardian/stats.json'
option stats_interval '60'
option max_log_size '524288'