全部公网的 ip 范围

[pfitseng]

根据http://zh.wikipedia.org/wiki/IPv4
去掉 0.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 224.0.0.0/3
我主要放在ocserv里用,no-route这个参数貌似对anyconnect没用
另外伸手下，哪位知道哪个段中国分到的多点？我来直接拿掉，误伤一点也没关系。

route = 1.0.0.0/255.0.0.0
route = 2.0.0.0/248.0.0.0
route = 8.0.0.0/254.0.0.0
route = 11.0.0.0/255.0.0.0
route = 12.0.0.0/240.0.0.0
route = 15.0.0.0/252.0.0.0
route = 16.0.0.0/240.0.0.0
route = 32.0.0.0/224.0.0.0
route = 64.0.0.0/224.0.0.0
route = 96.0.0.0/240.0.0.0
route = 112.0.0.0/248.0.0.0
route = 120.0.0.0/252.0.0.0
route = 124.0.0.0/254.0.0.0
route = 126.0.0.0/255.0.0.0
route = 128.0.0.0/224.0.0.0
route = 160.0.0.0/248.0.0.0
route = 168.0.0.0/255.0.0.0
route = 169.0.0.0/255.128.0.0
route = 169.128.0.0/255.192.0.0
route = 169.192.0.0/255.224.0.0
route = 169.224.0.0/255.240.0.0
route = 169.240.0.0/255.248.0.0
route = 169.248.0.0/255.252.0.0
route = 169.252.0.0/255.254.0.0
route = 169.255.0.0/255.255.0.0
route = 170.0.0.0/254.0.0.0
route = 172.0.0.0/255.240.0.0
route = 172.32.0.0/255.224.0.0
route = 172.64.0.0/255.192.0.0
route = 172.128.0.0/255.128.0.0
route = 173.0.0.0/224.0.0.0
route = 192.0.0.0/255.128.0.0
route = 192.128.0.0/255.224.0.0
route = 192.160.0.0/255.248.0.0
route = 192.169.0.0/255.255.0.0
route = 192.170.0.0/255.254.0.0
route = 192.172.0.0/255.252.0.0
route = 192.176.0.0/255.240.0.0
route = 192.192.0.0/255.192.0.0
route = 193.0.0.0/224.0.0.0

[ScotGu]

http://ipblock.chacuo.net/down/t_txt=c_CN

（http://ipblock.chacuo.net/view/c_CN）

不客气

[imlonghao]

感觉从APNIC获取的准确一些

[imlonghao]

curl 'http://ftp.apnic.net/apnic/stats/apnic/delegated-apnic-latest' | grep ipv4 | grep 'CN' | awk -F\| '{ printf("%s/%d\n", $4, 32-log($5)/log(2)) }' > CN

[Yamade]

@imlonghao 然后再加入屏蔽

[Daniel65536]

no-route这个参数对anyconnect有用，只是不能和route参数混合使用。

[pfitseng]

@Daniel65536 果然是这样，我理解错了

[LazyZhu]

可以加入常用网站/CDN的ip段，来源于日常使用中收集的

[hejiaxian]

@imlonghao 这个霸气，不过规则太多估计得跪，要精简下

[alect]

127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 不用去掉

[regeditms]

no-route 这个字段有用目前最多只能达到200条，