Almost everyone in IT knows the bogons, even if they don't know them by that name. They're the list of unassigned IP addresses that no one should be using on an external network. The one's most people use are the 192.168.0.0, 127.0.0.0 and 10.0.0.0 addresses, but there are nearly 50 distinct class A, B & C networks that qualify as bogons.
Unless you have a good reason, you should have ingress and egress filters on your firewalls blocking all traffic to these networks. Why? Because there's no good reason for your firewall to be passing this traffic, since the bogons are supposed to be unused. If there's traffic originating from one of these coming into your network, chances are very good it's going to be malicious. The source address of the packet is most likely forged and it's an attempt to do something bad to your network. Similarly, if your network is trying send packets to one of these networks, you either have a misconfigured host or one that's trying to connect something that doesn't exist. So in either case, you want to block the traffic before it can do harm.
So how do you block the bogons using the Cobia firewall? It's actually pretty easy, but it is somewhat 
time consuming. Even the consolidated bogons list has 30 different networks that need rules written for them. If you create both ingress and egress filters for all of the networks, you have to create over 60 rules. From the firewall module, select Add Rule. I chose to name each rule "Bogon x.x.x.x" so that I could easily identify each rule and the addresses it affects. I also decided to turn both logging and the rule hit counter options to make troubleshooting that much easier. After all, if you're using a bogon IP network in you're DMZ, blocking all the bogon's could cause you just a little bit of problems.
The rules themselves are simple: Block any traffic with a source IP in the bogons list. Using the 5.0.0.0 network as an example, select the exterior interface as the source and the internal interface. Change the source address from 'Any source IP address' to 'IP address/netmask'. Enter the network IP and mask in the appropriate boxes, leave the destination address as 'any' and the protocol as 'any'. Pay attention to the subnet masks for the bogons, many of them are not standard /8 or /16 subnets. You could
change the destination address to that of your network, but it would have the same affect overall anyways. Finally, set the action to deny, hit the 'ok' button to save the rule and continue on to the next rule. When you have all 30 incoming rules, hit the 'ok' button a second time to commit the rules.
Creating the egress is the same, except the interfaces will be reversed with the incoming interface being your internal interface. Other than something on your internal network, such as the previously mentioned DMZ, there's no reason our network should ever be sending traffic to a bogon network. Having the egress filters turned on with the rule hit counter enabled could notify you of malicious traffic on your network. Or maybe an end user who took their laptop home and reconfigured it for his or her network and is now sending out spurious traffic. It also helps you be a good netizen.
I've included a screen shot of a finished firewal rule as well as a copy of the IPtables rules that Cobia creates to implement these rules in the extended body. Each Cobia rule creates 3 IPtables rules: the blocking rule, the logging rule and the hit counter rule. The logging and counter rules are almost the same, except for the fact that they write to different log files. The IPtables rules below are created automatically by Cobia, I included them to illustrate how easy Cobia makes it to create these rules.
Please leave me a comment or send me an email if you found this useful. If you've got a project you'd like to see me walk through with Cobia, let me know. I'll be regularly posting how-to's such as this and could use some ideas .
Bogon firewall rule
IPtables rules for bogons blocking:
-A FWM-FORWARD -s 0.0.0.0/254.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:001:0003: : Bogons 0.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:001:0003: " --log-level 6
-A FWM-FORWARD -s 0.0.0.0/254.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:001:0003: : Bogons 0.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:001:0003: " --log-level 6
-A FWM-FORWARD -s 0.0.0.0/254.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:001:0003: : Bogons 0.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 2.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:002:0004: : Bogon 2.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:002:0004: " --log-level 6
-A FWM-FORWARD -s 2.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:002:0004: : Bogon 2.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:002:0004: " --log-level 6
-A FWM-FORWARD -s 2.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:002:0004: : Bogon 2.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 5.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:003:0005: : Bogon 5.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:003:0005: " --log-level 6
-A FWM-FORWARD -s 5.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:003:0005: : Bogon 5.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:003:0005: " --log-level 6
-A FWM-FORWARD -s 5.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:003:0005: : Bogon 5.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 10.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:004:0006: : Bogon 10.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:004:0006: " --log-level 6
-A FWM-FORWARD -s 10.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:004:0006: : Bogon 10.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:004:0006: " --log-level 6
-A FWM-FORWARD -s 10.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:004:0006: : Bogon 10.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 23.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:005:0007: : Bogon 23.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:005:0007: " --log-level 6
-A FWM-FORWARD -s 23.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:005:0007: : Bogon 23.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:005:0007: " --log-level 6
-A FWM-FORWARD -s 23.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:005:0007: : Bogon 23.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 27.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:006:0008: : Bogon 27.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:006:0008: " --log-level 6
-A FWM-FORWARD -s 27.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:006:0008: : Bogon 27.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:006:0008: " --log-level 6
-A FWM-FORWARD -s 27.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:006:0008: : Bogon 27.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 31.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:007:0009: : Bogon 31.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:007:0009: " --log-level 6
-A FWM-FORWARD -s 31.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:007:0009: : Bogon 31.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:007:0009: " --log-level 6
-A FWM-FORWARD -s 31.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:007:0009: : Bogon 31.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 36.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:008:0010: : Bogon 36.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:008:0010: " --log-level 6
-A FWM-FORWARD -s 36.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:008:0010: : Bogon 36.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:008:0010: " --log-level 6
-A FWM-FORWARD -s 36.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:008:0010: : Bogon 36.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 38.0.0.0/254.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:009:0011: : Bogon 39.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:009:0011: " --log-level 6
-A FWM-FORWARD -s 38.0.0.0/254.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:009:0011: : Bogon 39.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:009:0011: " --log-level 6
-A FWM-FORWARD -s 38.0.0.0/254.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:009:0011: : Bogon 39.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 42.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:010:0012: : Bogon 42.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:010:0012: " --log-level 6
-A FWM-FORWARD -s 42.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:010:0012: : Bogon 42.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:010:0012: " --log-level 6
-A FWM-FORWARD -s 42.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:010:0012: : Bogon 42.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 46.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:011:0013: : Bogon 46.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:011:0013: " --log-level 6
-A FWM-FORWARD -s 46.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:011:0013: : Bogon 46.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:011:0013: " --log-level 6
-A FWM-FORWARD -s 46.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:011:0013: : Bogon 46.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 49.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:012:0014: : Bogon 49.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:012:0014: " --log-level 6
-A FWM-FORWARD -s 49.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:012:0014: : Bogon 49.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:012:0014: " --log-level 6
-A FWM-FORWARD -s 49.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:012:0014: : Bogon 49.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 50.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:013:0015: : Bogon 50.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:013:0015: " --log-level 6
-A FWM-FORWARD -s 50.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:013:0015: : Bogon 50.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:013:0015: " --log-level 6
-A FWM-FORWARD -s 50.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:013:0015: : Bogon 50.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 94.0.0.0/254.0.0.0 -i eth1 -o eth1 -m comment --comment "FWM-WALL-FWR:014:0016: : Bogon 94.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:014:0016: " --log-level 6
-A FWM-FORWARD -s 94.0.0.0/254.0.0.0 -i eth1 -o eth1 -m comment --comment "FWM-WALL-FWR:014:0016: : Bogon 94.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:014:0016: " --log-level 6
-A FWM-FORWARD -s 94.0.0.0/254.0.0.0 -i eth1 -o eth1 -m comment --comment "FWM-WALL-FWR:014:0016: : Bogon 94.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 100.0.0.0/252.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:015:0017: : Bogon 100.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:015:0017: " --log-level 6
-A FWM-FORWARD -s 100.0.0.0/252.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:015:0017: : Bogon 100.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:015:0017: " --log-level 6
-A FWM-FORWARD -s 100.0.0.0/252.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:015:0017: : Bogon 100.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 104.0.0.0/248.0.0.0 -i eth0 -o eth0 -m comment --comment "FWM-WALL-FWR:016:0018: : Bogon 104.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:016:0018: " --log-level 6
-A FWM-FORWARD -s 104.0.0.0/248.0.0.0 -i eth0 -o eth0 -m comment --comment "FWM-WALL-FWR:016:0018: : Bogon 104.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:016:0018: " --log-level 6
-A FWM-FORWARD -s 104.0.0.0/248.0.0.0 -i eth0 -o eth0 -m comment --comment "FWM-WALL-FWR:016:0018: : Bogon 104.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 112.0.0.0/252.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:017:0019: : Bogon 112.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:017:0019: " --log-level 6
-A FWM-FORWARD -s 112.0.0.0/252.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:017:0019: : Bogon 112.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:017:0019: " --log-level 6
-A FWM-FORWARD -s 112.0.0.0/252.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:017:0019: : Bogon 112.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 127.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:018:0020: : Bogon 127.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:018:0020: " --log-level 6
-A FWM-FORWARD -s 127.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:018:0020: : Bogon 127.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:018:0020: " --log-level 6
-A FWM-FORWARD -s 127.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:018:0020: : Bogon 127.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 169.254.0.0/255.255.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:019:0021: : Bogon 169.254.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:019:0021: " --log-level 6
-A FWM-FORWARD -s 169.254.0.0/255.255.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:019:0021: : Bogon 169.254.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:019:0021: " --log-level 6
-A FWM-FORWARD -s 169.254.0.0/255.255.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:019:0021: : Bogon 169.254.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 172.16.0.0/255.240.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:020:0022: : Bogon 172.16.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:020:0022: " --log-level 6
-A FWM-FORWARD -s 172.16.0.0/255.240.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:020:0022: : Bogon 172.16.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:020:0022: " --log-level 6
-A FWM-FORWARD -s 172.16.0.0/255.240.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:020:0022: : Bogon 172.16.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 173.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:021:0023: : Bogon 173.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:021:0023: " --log-level 6
-A FWM-FORWARD -s 173.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:021:0023: : Bogon 173.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:021:0023: " --log-level 6
-A FWM-FORWARD -s 173.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:021:0023: : Bogon 173.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 174.0.0.0/254.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:022:0024: : Bogon 174.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:022:0024: " --log-level 6
-A FWM-FORWARD -s 174.0.0.0/254.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:022:0024: : Bogon 174.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:022:0024: " --log-level 6
-A FWM-FORWARD -s 174.0.0.0/254.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:022:0024: : Bogon 174.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 176.0.0.0/248.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:023:0025: : Bogon 176.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:023:0025: " --log-level 6
-A FWM-FORWARD -s 176.0.0.0/248.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:023:0025: : Bogon 176.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:023:0025: " --log-level 6
-A FWM-FORWARD -s 176.0.0.0/248.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:023:0025: : Bogon 176.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 184.0.0.0/252.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:024:0026: : Bogon 184.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:024:0026: " --log-level 6
-A FWM-FORWARD -s 184.0.0.0/252.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:024:0026: : Bogon 184.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:024:0026: " --log-level 6
-A FWM-FORWARD -s 184.0.0.0/252.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:024:0026: : Bogon 184.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 192.0.2.0/255.255.255.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:025:0027: : Bogon 192.0.2.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:025:0027: " --log-level 6
-A FWM-FORWARD -s 192.0.2.0/255.255.255.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:025:0027: : Bogon 192.0.2.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:025:0027: " --log-level 6
-A FWM-FORWARD -s 192.0.2.0/255.255.255.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:025:0027: : Bogon 192.0.2.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 192.168.0.0/255.255.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:026:0028: : Bogon 192.168.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:026:0028: " --log-level 6
-A FWM-FORWARD -s 192.168.0.0/255.255.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:026:0028: : Bogon 192.168.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:026:0028: " --log-level 6
-A FWM-FORWARD -s 192.168.0.0/255.255.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:026:0028: : Bogon 192.168.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 197.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:027:0029: : Bogon 197.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:027:0029: " --log-level 6
-A FWM-FORWARD -s 197.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:027:0029: : Bogon 197.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:027:0029: " --log-level 6
-A FWM-FORWARD -s 197.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:027:0029: : Bogon 197.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 198.18.0.0/255.254.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:028:0030: : Bogon 198.18.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:028:0030: " --log-level 6
-A FWM-FORWARD -s 198.18.0.0/255.254.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:028:0030: : Bogon 198.18.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:028:0030: " --log-level 6
-A FWM-FORWARD -s 198.18.0.0/255.254.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:028:0030: : Bogon 198.18.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 223.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:029:0031: : Bogon 223.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:029:0031: " --log-level 6
-A FWM-FORWARD -s 223.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:029:0031: : Bogon 223.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:029:0031: " --log-level 6
-A FWM-FORWARD -s 223.0.0.0/255.0.0.0 -i eth1 -o eth0 -m comment --comment "FWM-WALL-FWR:029:0031: : Bogon 223.0.0.0" -m state --state NEW,RELATED -j DROP
-A FWM-FORWARD -s 224.0.0.0/224.0.0.0 -m comment --comment "FWM-WALL-FWR:030:0032: : Bogon 224.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-LFR:030:0032: " --log-level 6
-A FWM-FORWARD -s 224.0.0.0/224.0.0.0 -m comment --comment "FWM-WALL-FWR:030:0032: : Bogon 224.0.0.0" -m state --state NEW,RELATED -j LOG --log-prefix "FWM-WALL-HFR:030:0032: " --log-level 6
-A FWM-FORWARD -s 224.0.0.0/224.0.0.0 -m comment --comment "FWM-WALL-FWR:030:0032: : Bogon 224.0.0.0" -m state --state NEW,RELATED -j DROP
Comments