cleanup

1 files changed, 11 insertions, 1 deletions

diff --git a/etc/nolocal.net b/etc/nolocal.net
index 9fa785450..8955f740d 100644
--- a/etc/nolocal.net
+++ b/etc/nolocal.net
@@ -12,15 +12,25 @@
 #
 ###################################################################
 
-
+#allow all loopback traffic
 -A INPUT -i lo -j ACCEPT
+
+# no incoming connections
 -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
+
+# allow ping etc.
 -A INPUT -p icmp --icmp-type destination-unreachable -j ACCEPT
 -A INPUT -p icmp --icmp-type time-exceeded -j ACCEPT
 -A INPUT -p icmp --icmp-type echo-request -j ACCEPT
 
+# accept dns requests going out to a server on the local network
 -A OUTPUT -p udp --dport 53 -j ACCEPT
+
+# drop all local network traffic
 -A OUTPUT -d 192.168.0.0/16 -j DROP
 -A OUTPUT -d 10.0.0.0/8 -j DROP
 -A OUTPUT -d 172.16.0.0/12 -j DROP
+
+# drop multicast traffic
+-A OUTPUT -d 244.0.0.0/4 -j DROP
 COMMIT