How do I stop the network 169.254.0.0/16 from being added to my routes?
A:
OK, this one is not firewall related, but we have been asked it enough that we promised to include it in the book. This is a DHCP thing, and it's called a "Zeroconf route." And we agree, it's annoying. If you are on a Redhat box and want it to go away, comment out the following from /etc/sysconfig/network-scripts/ifup.
# Add Zeroconf route. if [ -z "${NOZEROCONF}" -a "${ISALIAS}" = "no" ]; then ip route replace 169.254.0.0/16 dev ${REALDEVICE} fi