ffnord/ffnord-puppet-gateway — pull request #38 by ohrensessel (2014-11-28 13:40:11+00:00)
Title: firewall4: first implementation of bcp38 ingress filtering

this has to be applied manually, as the firewall manifest does not
overwrite the 200-block-ranges file when puppet is re-run (change that?)

please note that this is a first version, not complete. We should
also implement this for incoming traffic on the vpn interface?

please do not merge this now, lets discuss first