Help - Search - Members - Calendar
Full Version: apf default drop rules
The Planet Forums > Security > General Security
johnmd
Hello
I notice that apf adds some default drop rules and example of some are listed below.
Does anyone know how to edit these as the 82.0.0.0/8
have some of my customers on it and is a ripe owned address.

I did a iptables -D INPUT -s 83.0.0.0/255.0.0.0 -i eth0 -j DROP
followed by a iptables -A INPUT -s 83.0.0.0/255.0.0.0 -i eth0 -j ACCEPT

to get me going in the mean time,but I am pretty sure when apf restarts I am back to square one.


DROP all -- 104.0.0.0/8 anywhere
DROP all -- 105.0.0.0/8 anywhere
DROP all -- 106.0.0.0/8 anywhere
DROP all -- 107.0.0.0/8 anywhere
DROP all -- 108.0.0.0/8 anywhere
DROP all -- 109.0.0.0/8 anywhere
DROP all -- 110.0.0.0/8 anywhere
DROP all -- 111.0.0.0/8 anywhere
DROP all -- 112.0.0.0/8 anywhere
DROP all -- 113.0.0.0/8 anywhere
DROP all -- 114.0.0.0/8 anywhere
DROP all -- 115.0.0.0/8 anywhere
DROP all -- 116.0.0.0/8 anywhere
DROP all -- 117.0.0.0/8 anywhere
DROP all -- 118.0.0.0/8 anywhere
DROP all -- 119.0.0.0/8 anywhere
DROP all -- 120.0.0.0/8 anywhere
DROP all -- 121.0.0.0/8 anywhere
DROP all -- 122.0.0.0/8 anywhere
DROP all -- 123.0.0.0/8 anywhere
DROP all -- 124.0.0.0/8 anywhere
DROP all -- 124.0.0.0/8 anywhere
DROP all -- 125.0.0.0/8 anywhere
DROP all -- 126.0.0.0/8 anywhere


Any help would be greatly appreciated.
skywalllker
Hi guys, I'm having the same problem here. Anybody have a solution for this?
rfxn
Please see:
http://www.rfxn.com/2009/03/31/bogon-filtering-update-it/
skywalllker
Thanks Ryan, what I did early on to overcome this problem was by editing file below:

/etc/apf/internals/reserved.networks

..and comment out the specific IP segment.
kamnet
QUOTE (rfxn @ Apr 5 2009, 06:02 AM) *


It appears that the link to this article as changed:
http://www.rfxn.com/2009/04/17/bogon-filtering-update-it/
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.