# List of IPs to block outright # Two formats: # 1) One IP or range per line # 2) One ip or range per line with added specific IN/OUT/FWD and TCP/UDP port (added in 0.9.8) # <SRC IF>|<SRC IP>|<SRC PORT RNG>|<DST IF>|<DST IP>|<DST PORT RNG>|<IN/OUT/FWD>|<PROTO> # One can leave out <SRC IF> <SRC IP> <SRC PORT RNG> <DST IF> <DST IP> <DST PORT RNG> # if you want to apply to all ports/interfaces/etc # Example: # - Block SRC of eth1 192.168.0.5:80 from contacting DST eth0 192.168.1.10:20 through 21, TCP # eth1|::1|80|eth0|2001::1|20-21|IN|TCP