# Protect against fake LAN/loopback connections from INET
	SPOOF_INET_4="10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 224.0.0.0/3"
	for spoofip in $SPOOF_INET_4; do
		ipt4 -A infw_inet -p all -s "$spoofip" -j DROP
	done

	SPOOF_INET_6="fc00::/7"
	for spoofip in $SPOOF_INET_6; do
		ipt6 -A infw_inet -p all -s "$spoofip" -j DROP
	done