claudio
|
938c939dfe
|
Filter the IPv6 Discard-Only Prefix because it should not be globally
routable. See RFC6666. Diff by Gleydson Soares.
|
11 years ago |
florian
|
c65c6496e7
|
move bgplg and slowcgi sockets to /var/www/run
input reyk@, guenther@
"move fast" deraadt@
OK naddy@
|
11 years ago |
phessler
|
301764d7a3
|
Add a brief comment describing each bogus v4 network that is filtered by
default, similar to the v6 entries.
While here, add a filter for 100.64.0.0/10, which is now reserved by RFC 6598
OK henning@, sthen@
|
12 years ago |
claudio
|
7ac30f3c8a
|
Add 2001:2::/48 (prefix used for benchmarking) to the list of
non-routeable prefixes. While there sort list.
Diff provided by Andre Keller.
|
14 years ago |
claudio
|
48f09b7f57
|
Update example filterset to include a basic IPv6 filterset.
While there extend the current IPv4 filterset.
OK sthen@, henning@
|
14 years ago |
sthen
|
c8795cfca1
|
add a sample for "socket ... restricted", prompted by mail from
Patrick Lamaiziere, ok henning@
|
14 years ago |
claudio
|
2e03005398
|
The deny all and allow from any inet prefixlen 8 - 24 will block the default
route already so don't add an additional rule for that. Instead add a commented
allow rule. Idea from Mitja Muzenic (mitja at muzenic dot net)
|
15 years ago |
claudio
|
fa0f3150b2
|
Update config because of the new way prefixlen works. The prefixlen 8 - 24
rule needs an explicit "inet" to match on IPv4 addresses only. OK henning@
|
17 years ago |
henning
|
bd051447a7
|
comment out the listen on statements, we don't want any by default,
and some minor tweaks
|
20 years ago |
henning
|
c0a72d2560
|
add an example neighbor with manual keyed IPsec
|
20 years ago |
henning
|
865353fbf2
|
king bula likes more sample fluff
|
20 years ago |
henning
|
73e3c491cd
|
provide some filter examples; PR3764
|
20 years ago |
henning
|
cc7a6f44ee
|
king bula sez: you shall have fluffy sample configs
|
21 years ago |
henning
|
3000687cd0
|
cope with recent changes and add examples for the new keywords
|
21 years ago |
henning
|
47259f6ca5
|
add sample bgpd.conf, not yet connected
requested by theo
|
21 years ago |