# When a packet arrives on an interface that has the 'blacklist' option# specified in /etc/shorewall/interfaces, its source IP address is# checked against this file and disposed of according to the# BLACKLIST_DISPOSITION and BLACKLIST_LOGLEVEL variables in# /etc/shorewall/shorewall.conf## If PROTOCOL or PROTOCOL and PORTS are supplied, only packets matching# the protocol (and one of the ports if PORTS supplied) are blocked.## Example:## To block DNS queries from address 192.0.2.126:## ADDRESS/SUBNET PROTOCOL PORT# 192.0.2.126 udp 53## Example:## To block DNS queries from addresses in the ipset 'dnsblack':## ADDRESS/SUBNET PROTOCOL PORT# +dnsblack udp 53## Please see http://shorewall.net/blacklisting_support.htm for additional# information.#################################################################################ADDRESS/SUBNET PROTOCOL PORT222.138.147.0/24206.161.207.2#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE