    # Drop all multicast traffic. Note that anything on from a local network
    # will have already been accepted via the local_chk chain.
    /sbin/iptables --append INPUT -s 224.0.0.0/4    -j denylog
    /sbin/iptables --append INPUT -d 224.0.0.0/4    -j denylog
    
    /sbin/iptables --append OUTPUT -s 224.0.0.0/4   -j denylog
    /sbin/iptables --append OUTPUT -d 224.0.0.0/4   -j denylog
