netfilter

Hello, my aim is to block so called "bogons" (http://iplists.firehol.org/?ipset=fullbogons) I will do it thru ipset (probably with hash:net parameter as the total number of IPs is few hundred million) But i need to block it on proper interface, because my server host few virtual servers whose...