local.m4: Don't expect `forbidden' to return.

[firewall] / classify.m4

diff --git a/classify.m4 b/classify.m4
index 6254993..6e304a8 100644 (file)
--- a/classify.m4
+++ b/classify.m4
@@ -131,7 +131,7 @@ run iptables -t mangle -A in-classify -g bad-source-address \
 run iptables -t mangle -A in-classify -g bad-source-address \
        -m addrtype --src-type BROADCAST \
 
-## Special IPv6 addresses.  Format multicast sources, and mark zero and
+## Special IPv6 addresses.  Forbid multicast sources, and mark zero and
 ## link local addresses.
 for i in :: fe80::/10; do
   run ip6tables -t mangle -A in-classify -g mark-from-link -s $i
@@ -332,7 +332,7 @@ do
   run iptables -t mangle -A in-default -s $addr -g bad-source-address
 done
 for addr in \
-       fc00::/7 \
+       fc00::/7 fec0::/10 \
        ::0:0/96 ::ffff:0:0/96 \
        2001:db8::/32
 do