summaryrefslogtreecommitdiff
path: root/policies/includes
diff options
context:
space:
mode:
authorJohan Lundberg <lundberg@nordu.net>2015-04-02 10:43:33 +0200
committerJohan Lundberg <lundberg@nordu.net>2015-04-02 10:43:33 +0200
commitbd611ac59f7c4db885a2f8631ef0bcdcd1901ca0 (patch)
treee60f5333a7699cd021b33c7f5292af55b774001b /policies/includes
Diffstat (limited to 'policies/includes')
-rw-r--r--policies/includes/untrusted-networks-blocking.inc18
1 files changed, 18 insertions, 0 deletions
diff --git a/policies/includes/untrusted-networks-blocking.inc b/policies/includes/untrusted-networks-blocking.inc
new file mode 100644
index 0000000..c77d064
--- /dev/null
+++ b/policies/includes/untrusted-networks-blocking.inc
@@ -0,0 +1,18 @@
+term deny-from-bogons {
+ comment:: "this is a sample edge input filter with a very very very long and
+ multi-line comment that"
+ comment:: "also has multiple entries."
+ source-address:: BOGON
+ action:: deny
+}
+
+term deny-from-reserved {
+ source-address:: RESERVED
+ action:: deny
+}
+
+term deny-to-rfc1918 {
+ destination-address:: RFC1918
+ action:: deny
+}
+