2004-01-31 17:11:22 +01:00
|
|
|
#
|
2004-10-26 17:26:13 +02:00
|
|
|
# Shorewall 2.2 -- RFC1918 File
|
2004-01-31 17:11:22 +01:00
|
|
|
#
|
|
|
|
|
# /etc/shorewall/rfc1918
|
|
|
|
|
#
|
|
|
|
|
# Lists the subnetworks that are blocked by the 'norfc1918' interface option.
|
|
|
|
|
#
|
2004-03-17 20:06:54 +01:00
|
|
|
# The default list includes those IP addresses listed in RFC 1918.
|
2004-01-31 17:11:22 +01:00
|
|
|
#
|
2004-03-19 16:27:54 +01:00
|
|
|
# DO NOT MODIFY THIS FILE. IF YOU NEED TO MAKE CHANGES, COPY THE FILE
|
|
|
|
|
# TO /etc/shorewall AND MODIFY THE COPY.
|
|
|
|
|
#
|
2004-01-31 17:11:22 +01:00
|
|
|
# Columns are:
|
|
|
|
|
#
|
2004-10-26 17:26:13 +02:00
|
|
|
# SUBNETS A comma-separated list of subnet addresses
|
2004-11-02 22:13:52 +01:00
|
|
|
# (host addresses also allowed as are IP
|
2004-09-08 20:46:57 +02:00
|
|
|
# address ranges provided that your kernel and iptables
|
2004-10-26 17:26:13 +02:00
|
|
|
# have iprange match support).
|
2004-01-31 17:11:22 +01:00
|
|
|
# TARGET Where to send packets to/from this subnet
|
|
|
|
|
# RETURN - let the packet be processed normally
|
|
|
|
|
# DROP - silently drop the packet
|
|
|
|
|
# logdrop - log then drop
|
|
|
|
|
#
|
|
|
|
|
###############################################################################
|
2004-10-26 17:26:13 +02:00
|
|
|
#SUBNETS TARGET
|
2004-01-31 17:11:22 +01:00
|
|
|
172.16.0.0/12 logdrop # RFC 1918
|
|
|
|
|
192.168.0.0/16 logdrop # RFC 1918
|
2004-03-17 20:06:54 +01:00
|
|
|
10.0.0.0/8 logdrop # RFC 1918
|
2004-01-31 17:11:22 +01:00
|
|
|
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
|
