#!/bin/bash
. /home/andres/src/tcscripts/filterclean
. /home/andres/src/tcscripts/vif

# IGMP
iptables -t raw -I PREROUTING -d 224.0.0.1 -j DROP
# PIMv2
iptables -t raw -I PREROUTING -d 224.0.0.13 -j DROP
# HSRP
iptables -t raw -I PREROUTING -d 224.0.0.2 -j DROP
# Some guy dhcp's like a maniac
ebtables -I FORWARD -s 00:50:56:7d:b4:ef -j DROP
# Schen dropbox
iptables -t raw -I PREROUTING -p udp --dport 17500 -j DROP
# Some NFS RPC
iptables -t raw -I PREROUTING -d 135.207.223.255 -p udp --dport 111 -j DROP
# Netbios
iptables -t raw -I PREROUTING -d 135.207.223.255 -p udp --dport 137 -j DROP
iptables -t raw -I PREROUTING -d 135.207.223.255 -p udp --dport 138 -j DROP
# SNAP Unnumbered, CDPv2
ebtables -I FORWARD -d 01:00:0c:cc:cc:cc -j DROP
ebtables -I FORWARD -d 01:00:0c:cc:cc:cd -j DROP
ebtables -I FORWARD -d 01:00:0c:00:00:00 -j DROP
# ARP who-has not for us
ebtables -I FORWARD -i peth0 -o vif1.0 -p arp --arp-opcode 1 --arp-ip-dst ! ${IP} -j DROP