[Firehol-support] Dropping localhost src packets.

[Costa Tsaousis]

Oh, and to block incoming traffic from source 127.0.0.1 coming from any
device other than lo, just apply this (similar to the one you already
did):

interface any bad src 127.0.0.1 dst not 127.0.0.1

Place this before any other interface.
But even if you do this, localhost will be able to talk to localhost.
This will just drop all packets from eth0 coming from any device OTHER
THAN lo and not going to 127.0.0.1.

Costa