fine now? u can put "loose"...its NO USE!! thats what i said..there will always be a route to the source....all u may drop is 10.x/192.168 and 172/16-31......that too if ur network isnt internally using it....

Oh, and if this ends up being the case, what's wrong with that? Less RFC1918 crap leaking between enterprises.