From e35b80fab10d6e608bebd11c55a0bc1a13696245 Mon Sep 17 00:00:00 2001 From: Mark Wooding Date: Fri, 30 Mar 2012 17:30:42 +0100 Subject: [PATCH] fender.m4: Define an address to be a guaranteed black hole. --- fender.m4 | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/fender.m4 b/fender.m4 index a6c7362..c8b2ee7 100644 --- a/fender.m4 +++ b/fender.m4 @@ -33,5 +33,9 @@ allowservices inbound tcp \ ## We have to provide NTP service. The guests sync to our clock. ntpclient inbound $ntp_servers +## Guaranteed black hole. Put this at the very front of the chain. +run iptables -I INPUT -d 212.13.198.78 -j DROP +run ip6tables -I INPUT -d 2001:ba8:0:1d9::ffff -j DROP + m4_divert(-1) ###----- That's all, folks -------------------------------------------------- -- 2.11.0