mirror of
https://gitlab.com/shorewall/code.git
synced 2024-11-08 08:44:05 +01:00
27 lines
793 B
Plaintext
27 lines
793 B
Plaintext
|
#
|
||
|
|
# Shorewall 1.3 -- RFC1918 File
|
||
|
|
#
|
||
|
|
# /etc/shorewall/rfc1918
|
||
|
|
#
|
||
|
|
# Lists the subnetworks that are blocked by the 'norfc1918' interface option.
|
||
|
|
#
|
||
|
|
# Columns are:
|
||
|
|
#
|
||
|
|
# SUBNET The subnet
|
||
|
|
# TARGET Where to send packets to/from this subnet
|
||
|
|
# RETURN - let the packet be processed normally
|
||
|
|
# DROP - silently drop the packet
|
||
|
|
# logdrop - log then drop
|
||
|
|
#
|
||
|
|
###############################################################################
|
||
|
|
#SUBNET TARGET
|
||
|
|
255.255.255.255 RETURN # We need to allow limited broadcast
|
||
|
|
169.254.0.0/16 DROP # DHCP autoconfig
|
||
|
|
0.0.0.0/8 logdrop # Reserved
|
||
|
|
10.0.0.0/8 logdrop # RFC 1918
|
||
|
|
127.0.0.0/8 logdrop # Loop Back
|
||
|
|
192.0.2.0/24 logdrop # Example addresses
|
||
|
|
192.168.0.0/16 logdrop # RFC 1918
|
||
|
|
172.16.0.0/12 logdrop # RFC 1918
|
||
|
|
240.0.0.0/4 logdrop # Reserved
|