iptables AS0_IN_PRE questions.

seandex

Are these necessary if I don't follow RFC1918 on the client?

AS0_IN all -- anywhere link-local/16
AS0_IN all -- anywhere 192.168.0.0/16
AS0_IN all -- anywhere 172.16.0.0/12
AS0_IN all -- anywhere 10.0.0.0/8

thinking about to drop it because of spoofing and bad ip attacks.
what do you think?

The Johan

Hi seandex,

As far as I know it's not supported to manually alter iptables rules on Access Server, you may cause unexpected problems. But I mean, sure, if you think you know what you're doing, go ahead and try it. Test everything afterwards and if everything checks out, great. But beware that whenever you make changes to the configuration or the access server restarts or reloads settings, these rules will very likely be added in again automatically.