# Stop RFC1918 nets on the outside interface

	${fwcmd} add deny all from 10.0.0.0/8 to any via ${oif}

	${fwcmd} add deny all from 172.16.0.0/12 to any via ${oif}

	${fwcmd} add deny all from 192.168.0.0/16 to any via ${oif}

	# Stop draft-manning-dsua-03.txt (1 May 2000) nets (includes RESERVED-1,

	# DHCP auto-configuration, NET-TEST, MULTICAST (class D), and class E)

	# on the outside interface

	${fwcmd} add deny all from 0.0.0.0/8 to any via ${oif}

	${fwcmd} add deny all from 169.254.0.0/16 to any via ${oif}

	${fwcmd} add deny all from 192.0.2.0/24 to any via ${oif}

	${fwcmd} add deny all from 224.0.0.0/4 to any via ${oif}

	${fwcmd} add deny all from 240.0.0.0/4 to any via ${oif}