X-Git-Url: https://git.distorted.org.uk/~mdw/firewall/blobdiff_plain/4aa2b49cc41cd34e1fc54858ca26c190d5b925cc..994ac8d0782c89a636f47b02a2dc096c72ff58c5:/classify.m4

diff --git a/classify.m4 b/classify.m4
index 6254993..6e304a8 100644
--- a/classify.m4
+++ b/classify.m4
@@ -131,7 +131,7 @@ run iptables -t mangle -A in-classify -g bad-source-address \
 run iptables -t mangle -A in-classify -g bad-source-address \
 	-m addrtype --src-type BROADCAST \
 
-## Special IPv6 addresses.  Format multicast sources, and mark zero and
+## Special IPv6 addresses.  Forbid multicast sources, and mark zero and
 ## link local addresses.
 for i in :: fe80::/10; do
   run ip6tables -t mangle -A in-classify -g mark-from-link -s $i
@@ -332,7 +332,7 @@ do
   run iptables -t mangle -A in-default -s $addr -g bad-source-address
 done
 for addr in \
-	fc00::/7 \
+	fc00::/7 fec0::/10 \
 	::0:0/96 ::ffff:0:0/96 \
 	2001:db8::/32
 do