default reject notify log;

for 128.45.0.0 netmask is 255.255.255.0 ;

# 100 bogus entries
# match on source and dest but fail on dest port

from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;
from subnet 128.45.1.0 to subnet 128.45.3.0 icmp type redirect reject;
from subnet 128.45.3.0 to subnet 128.45.1.0 icmp type redirect reject;

# real entry
from any to host 128.45.3.117 proto icmp accept;
from subnet 128.45.3.0 to subnet 128.45.1.0 accept;

