mirror of
https://gitlab.com/shorewall/code.git
synced 2024-11-15 04:04:10 +01:00
Initial revision
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@118 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
aae9be6222
commit
ee9ec3bedc
61
Lrp/etc/shorewall/rfc1918
Normal file
61
Lrp/etc/shorewall/rfc1918
Normal file
@ -0,0 +1,61 @@
|
|||||||
|
#
|
||||||
|
# Shorewall 1.3 -- RFC1918 File
|
||||||
|
#
|
||||||
|
# /etc/shorewall/rfc1918
|
||||||
|
#
|
||||||
|
# Lists the subnetworks that are blocked by the 'norfc1918' interface option.
|
||||||
|
#
|
||||||
|
# The default list includes those IP addresses listed in RFC 1918, those listed
|
||||||
|
# as 'reserved' by the IANA, the DHCP Autoconfig class B, and the class C
|
||||||
|
# reserved for use in documentation and examples.
|
||||||
|
#
|
||||||
|
# Columns are:
|
||||||
|
#
|
||||||
|
# SUBNET The subnet (host addresses also allowed)
|
||||||
|
# TARGET Where to send packets to/from this subnet
|
||||||
|
# RETURN - let the packet be processed normally
|
||||||
|
# DROP - silently drop the packet
|
||||||
|
# logdrop - log then drop
|
||||||
|
#
|
||||||
|
###############################################################################
|
||||||
|
#SUBNET TARGET
|
||||||
|
255.255.255.255 RETURN # We need to allow limited broadcast
|
||||||
|
169.254.0.0/16 DROP # DHCP autoconfig
|
||||||
|
172.16.0.0/12 logdrop # RFC 1918
|
||||||
|
192.0.2.0/24 logdrop # Example addresses
|
||||||
|
192.168.0.0/16 logdrop # RFC 1918
|
||||||
|
#
|
||||||
|
# The following are generated using the Python program found at:
|
||||||
|
#
|
||||||
|
# http://www.shorewall.net/pub/shorewall/contrib/iana_reserved/
|
||||||
|
#
|
||||||
|
# The program was contributed by Andy Wiggen
|
||||||
|
#
|
||||||
|
0.0.0.0/7 logdrop # Reserved
|
||||||
|
2.0.0.0/8 logdrop # Reserved
|
||||||
|
5.0.0.0/8 logdrop # Reserved
|
||||||
|
7.0.0.0/8 logdrop # Reserved
|
||||||
|
10.0.0.0/8 logdrop # Reserved
|
||||||
|
23.0.0.0/8 logdrop # Reserved
|
||||||
|
27.0.0.0/8 logdrop # Reserved
|
||||||
|
31.0.0.0/8 logdrop # Reserved
|
||||||
|
36.0.0.0/7 logdrop # Reserved
|
||||||
|
39.0.0.0/8 logdrop # Reserved
|
||||||
|
41.0.0.0/8 logdrop # Reserved
|
||||||
|
42.0.0.0/8 logdrop # Reserved
|
||||||
|
58.0.0.0/7 logdrop # Reserved
|
||||||
|
60.0.0.0/8 logdrop # Reserved
|
||||||
|
69.0.0.0/8 logdrop # Reserved
|
||||||
|
70.0.0.0/7 logdrop # Reserved
|
||||||
|
72.0.0.0/5 logdrop # Reserved
|
||||||
|
82.0.0.0/7 logdrop # Reserved
|
||||||
|
84.0.0.0/6 logdrop # Reserved
|
||||||
|
88.0.0.0/5 logdrop # Reserved
|
||||||
|
96.0.0.0/3 logdrop # Reserved
|
||||||
|
197.0.0.0/8 logdrop # Reserved
|
||||||
|
222.0.0.0/7 logdrop # Reserved
|
||||||
|
240.0.0.0/4 logdrop # Reserved
|
||||||
|
#
|
||||||
|
# End of generated entries
|
||||||
|
#
|
||||||
|
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
|
Loading…
Reference in New Issue
Block a user