=================================================================== RCS file: /home/cvsd/home/cvs/scripts/shell/firewall/fw-universal.sh,v retrieving revision 2.66 retrieving revision 2.67 diff -u -p -r2.66 -r2.67 --- scripts/shell/firewall/fw-universal.sh 2009/02/06 23:13:38 2.66 +++ scripts/shell/firewall/fw-universal.sh 2009/02/11 22:55:41 2.67 @@ -9,7 +9,7 @@ # Licensed under terms of GNU General Public License. # All rights reserved. # -# $Platon: scripts/shell/firewall/fw-universal.sh,v 2.65 2009-02-06 00:43:12 rajo Exp $ +# $Platon: scripts/shell/firewall/fw-universal.sh,v 2.66 2009-02-06 23:13:38 rajo Exp $ # # Changelog: # 2003-10-24 - created @@ -335,8 +335,11 @@ anti_spoof_filter() $IPTABLES -A spoof -s 172.16.0.0/12 -j DROP # RFC1918 $IPTABLES_LOG -A spoof -s 10.0.0.0/8 $LOG_LIMIT "RESERVED:10.0.0.0/8 src" $IPTABLES -A spoof -s 10.0.0.0/8 -j DROP # RFC1918 len pre sietovy interface do Internetu, kedze 10.0.0.0 je adresa LAN - $IPTABLES_LOG -A spoof -s 96.0.0.0/4 $LOG_LIMIT "RESERVED:96.0.0.0/4 src" - $IPTABLES -A spoof -s 96.0.0.0/4 -j DROP # IANA + + # 2009-02-11 - Not reserver anymore: http://www.iana.org/assignments/ipv4-address-space/ + # - it is a Comcast network now + #$IPTABLES_LOG -A spoof -s 96.0.0.0/4 $LOG_LIMIT "RESERVED:96.0.0.0/4 src" + #$IPTABLES -A spoof -s 96.0.0.0/4 -j DROP # IANA for iface in $ANTISPOOF_IFACE; do print_info -en " $iface"