#   When a packet arrives on an interface that has the 'blacklist' option
#   specified in /etc/shorewall/interfaces, its source IP address is
#   checked against this file and disposed of according to the
#   BLACKLIST_DISPOSITION and BLACKLIST_LOGLEVEL variables in
#   /etc/shorewall/shorewall.conf
#
#   If PROTOCOL or PROTOCOL and PORTS are supplied, only packets matching
#   the protocol (and one of the ports if PORTS supplied) are blocked.
#
#   Example:
#
#   To block DNS queries from address 192.0.2.126:
#
#   ADDRESS/SUBNET      PROTOCOL    PORT
#   192.0.2.126     udp     53
#
#   Example:
#
#   To block DNS queries from addresses in the ipset 'dnsblack':
#
#   ADDRESS/SUBNET      PROTOCOL    PORT
#   +dnsblack       udp     53
#
# Please see http://shorewall.net/blacklisting_support.htm for additional
# information.
#
###############################################################################
#ADDRESS/SUBNET     PROTOCOL    PORT
222.138.147.0/24
206.161.207.2
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE