Hi Jack! > If I am blocking 194.149.65.0/23 this is a standard format, it tells > us that the IP's are the 194.149.65.0-255 and 194.149.66.0-255. This is where you've got it wrong, it means 94.149.64.0-255 and 94.149.65.0-255. If you need 65 and 66 you will need to specify two /24 CIDR entries: 194.149.65.0/24 and 194.149.66.0/24
cheers, Michael OK, yes I see my error, however it's still a valid range. I do mean 94.149.64.0-255 and 94.149.65.0-255 These IP's come from a combination of places like http://www.okean.com ( they are down at the moment ) Or http://www.spamhaus.org/drop/drop.lasso The lists provide straight numbers, I then have a script create all my lists then add the REJECT CIDR-BLOCK error etc... so an entry looks like this: 217.199.240.0/20 REJECT CIDR-BLOCK RUSSIA:217.199.240.0/20 So, I'm still confused as to why it doesn't like that.
