Private IP's in the list

[hendrikvanniekerk79]

List have the following addresses that need to be removed.

0.0.0.0/8 @ line 35 10.0.0.0/8 @ line 111 127.0.0.0/8 @ line 2083 172.16.0.0/12 @ line 2535 192.168.0.0/16 @ line 3251

why such a large subnet in the list?

224.0.0.0/3

[ktsaou]

Which list? firehol_level1 includes all internet unroutable IPs by definition (includes fullbogons). Check it at https://iplists.firehol.org

The idea is that you apply such blocklists on the internet facing interface, not globally. You should want to block all these IPs on the internet interface.

[tylerszabo]

Is there similar version of this list that omits the private IPs? I like to block known malicious IPs bidirectionally but having the private IPs means I can't consume this list.

[Kolano]

There are a number of private IPs in the Level 4 list as well... 192.168.0.1 192.168.1.1 192.168.14.1 192.168.178.151 192.168.201.3

[eborisch]

Shouldn't 224.0.0.0/3 be 224.0.0.0/4? Ref: https://bugzilla.redhat.com/show_bug.cgi?id=1420032 and IANA Guidelines for IPv4 Multicast Address Assignments (Range from from 224.0.0.0 - 239.255.255.255)