-------------------------------------------------------------------------
/sbin/ipchains -A input  -i eth1 -s 10.0.0.0/8 -j DENY
/sbin/ipchains -A input  -i eth1 -d 10.0.0.0/8 -j DENY
/sbin/ipchains -A output -i eth1 -s 10.0.0.0/8 -j DENY -l
/sbin/ipchains -A output -i eth1 -d 10.0.0.0/8 -j DENY -l

/sbin/ipchains -A input  -i eth1 -s 172.16.0.0/12 -j DENY
/sbin/ipchains -A input  -i eth1 -d 172.16.0.0/12 -j DENY
/sbin/ipchains -A output -i eth1 -s 172.16.0.0/12 -j DENY -l
/sbin/ipchains -A output -i eth1 -d 172.16.0.0/12 -j DENY -l

/sbin/ipchains -A input  -i eth1 -s 192.168.0.0/16 -j DENY
/sbin/ipchains -A input  -i eth1 -d 192.168.0.0/16 -j DENY
/sbin/ipchains -A output -i eth1 -s 192.168.0.0/16 -j DENY -l
/sbin/ipchains -A output -i eth1 -d 192.168.0.0/16 -j DENY -l

/sbin/ipchains -A input  -i eth1 -s 127.0.0.0/8 -j DENY
/sbin/ipchains -A output -i eth1 -s 127.0.0.0/8 -j DENY -l

/sbin/ipchains -A input  -i eth1 -s 255.255.255.255 -j DENY -l
/sbin/ipchains -A input  -i eth1 -d 0.0.0.0 -j DENY -l

/sbin/ipchains -A input  -i eth1 -s 224.0.0.0/4 -j DENY -l
/sbin/ipchains -A output  -i eth1 -s 224.0.0.0/4 -j DENY -l

/sbin/ipchains -A output  -i eth1 -d 224.0.0.0/4 -j REJECT -l

/sbin/ipchains -A input  -i eth1 -d 224.0.0.0/4 -j REJECT -l

/sbin/ipchains -A output  -i eth1 -s 240.0.0.0/5 -j DENY -l

/sbin/ipchains -A input -i eth1 -s 1.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 2.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 5.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 7.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 23.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 27.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 31.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 37.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 39.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 41.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 42.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 58.0.0.0/7 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 60.0.0.0/8 -j DENY -l

/sbin/ipchains -A input -i eth1 -s 65.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 66.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 67.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 68.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 69.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 70.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 71.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 72.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 73.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 74.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 75.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 76.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 77.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 78.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 79.0.0.0/8 -j DENY -l

/sbin/ipchains -A input -i eth1 -s 80.0.0.0/4 -j DENY -l

/sbin/ipchains -A input -i eth1 -s 96.0.0.0/4 -j DENY -l

/sbin/ipchains -A input -i eth1 -s 112.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 113.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 114.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 115.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 116.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 117.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 118.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 119.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 120.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 121.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 122.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 123.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 124.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 125.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 126.0.0.0/8 -j DENY -l

#/sbin/ipchains -A input -i eth1 -s 217.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 218.0.0.0/8 -j DENY -l
/sbin/ipchains -A input -i eth1 -s 219.0.0.0/8 -j DENY -l

/sbin/ipchains -A input -i eth1 -s 220.0.0.0/6 -j DENY -l

/sbin/ipchains -A output -i eth1 -p icmp -s 212.188.14.17 fragmentation-needed  -d 
----------------------------------------------------------