mirror of
https://git.dn42.dev/dn42/registry.git
synced 2025-10-31 19:50:44 +08:00
29 lines
1.3 KiB
Text
29 lines
1.3 KiB
Text
# For Quagga Rules:
|
|
# cat filter.txt | \
|
|
# grep -e ^[0-9] | \
|
|
# awk '{ print "ip prefix-list dn42-in seq " $1 " " $2 " " $3 " ge " $4 " le " $5}' | \
|
|
# sed "s_/\([0-9]\+\) ge \1_/\1_g;s_/\([0-9]\+\) le \1_/\1_g"
|
|
#
|
|
# For BIRD Rules: (see also: utils/bgp-filter.rb)
|
|
# cat filter.txt | \
|
|
# awk 'BEGIN {printf "function is_valid_network() {\n return net ~ [\n" } \
|
|
# /^[0-9]/ && $2 ~ /permit/ {printf " %s{%s,%s},\n", $3, $4, $5};' | \
|
|
# sed "$ s/,$/\n ];\n}/"
|
|
|
|
|
|
#Nr Action Prefix MinLen MaxLen
|
|
0010 permit 172.20.0.0/14 21 29 # dn42 main net
|
|
0011 permit 172.20.0.0/24 28 32 # dn42 Anycast range
|
|
0012 permit 172.21.0.0/24 28 32 # dn42 Anycast range
|
|
0013 permit 172.22.0.0/24 28 32 # dn42 Anycast range
|
|
0014 permit 172.23.0.0/24 28 32 # dn42 Anycast range
|
|
|
|
0020 deny 10.10.10.0/24 24 32 # kabel deutschland/superkabel has DNS servers there (IDIOTS)
|
|
0021 permit 10.100.0.0/14 14 32 # chaosvpn
|
|
0022 permit 10.0.0.0/8 15 24 # freifunk/chaosvpn
|
|
|
|
0040 permit 172.31.0.0/16 16 32 # chaosvpn
|
|
|
|
0050 deny 172.22.166.0/24 24 32 # Black List due to policy violations.
|
|
|
|
1000 deny 0.0.0.0/0 0 32 # block the rest
|