Changeset 10719 in hybrid for branches/releng-9.0

Timestamp:

May 8, 2012, 5:19:24 PM (13 years ago)

Author:

rick

Message:

only allow reachable 172.16.0.0/12 subnets.

Related-To: nodefactory#153

File:

• branches/releng-9.0/nanobsd/files/etc/rc.conf (modified) (1 diff)

branches/releng-9.0/nanobsd/files/etc/rc.conf

@@ -23 +23 @@
 lvrouted_enable="YES"
 lvrouted_flags="-u -s s00p3rs3kr3t -m 28"
+
+# Block the full range as smaller subnets are used for allowances, this avoids
+# traffic going out (due to the default route) to unreachable parts to the
+# 172.16.0.0/12 network. 
+static_routes="quickstop"
+route_quickstop="-net 172.16.0.0/12 127.0.0.1 -reject"
 
 # NTP server needs working config with WL network or internet on boot