~mdw
/
firewall
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(from parent 1:
1a42af9
)
classify.m4: Reject the RFC5737 documentation-only addresses.
author
Mark Wooding
<mdw@distorted.org.uk>
Thu, 8 Mar 2012 18:56:48 +0000
(18:56 +0000)
committer
Mark Wooding
<mdw@distorted.org.uk>
Thu, 8 Mar 2012 18:56:48 +0000
(18:56 +0000)
classify.m4
patch
|
blob
|
blame
|
history
diff --git
a/classify.m4
b/classify.m4
index
8b6a650
..
16a92c9
100644
(file)
--- a/
classify.m4
+++ b/
classify.m4
@@
-245,7
+245,8
@@
done
## Fill in the black holes in the network.
for addr in \
10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 \
- 127.0.0.0/8 192.0.2.0/24
+ 127.0.0.0/8 \
+ 192.0.2.0/24 198.51.100.0/24 203.0.113.0/24
do
run iptables -t mangle -A in-default -s $addr -g bad-source-address
done