classify.m4: Reject the RFC5737 documentation-only addresses.

diff --git a/classify.m4 b/classify.m4
index 8b6a650..16a92c9 100644 (file)
--- a/classify.m4
+++ b/classify.m4
@@ -245,7 +245,8 @@ done
 ## Fill in the black holes in the network.
 for addr in \
        10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 \
-       127.0.0.0/8 192.0.2.0/24
+       127.0.0.0/8 \
+       192.0.2.0/24 198.51.100.0/24 203.0.113.0/24
 do
   run iptables -t mangle -A in-default -s $addr -g bad-source-address
 done