True. I attach interface (-i/-o) matches so I will only filter my networks. I wrote those lines of the top of my head so I forgot the -i/-o.
At 20:45 28-05-2002 +0200, Henrik Nordstrom wrote: >Which is not generally a valid thing to assume.. the .255 and/or .0 >address may be in use on larger networks, especially if addresses are >assigned dynamically using a large DHCP scope.. > > >On Tuesday 28 May 2002 16:07, Filipe Almeida wrote: > > I usually use: > > > > iptables -A FORWARD -s 0.0.0.255/0.0.0.255 -j DROP > > iptables -A FORWARD -d 0.0.0.255/0.0.0.255 -j DROP > > iptables -A FORWARD -s 0.0.0.0/0.0.0.255 -j DROP > > iptables -A FORWARD -d 0.0.0.0/0.0.0.255 -j DROP > > > > to stop routing of broadcasted packets. This works assuming you > > only have 256 sized classes.
