SMURF amplifier block list

All outgoing pkts to 220.88.192.128/27 now should go to Null0. I am sure
one can improve on the logic even more.

Exactly. All OUTGOING packets. Not Incoming. Not the smurf attack
packets which are swamping your downstream customer, which have a source
address from 220.88.192.128/27.

My textual mistake - this snippet is to send pkts to dev/null for all pkts
*sourced* from 220.88.192.128/27. -Hank