        # stop spammer --- SHINODA
        # Charter Communications (US)
        ${fwcmd} add deny log all from 24.241.62.20/15 to any 25 setup via ${oif}
        # Performance Systems International Inc. (US)
        ${fwcmd} add deny log all from 38.113.205.231/13 to any 25 setup via ${oif}
        # CNC (CN) 58.14.0.0 - 58.25.255.255
        ${fwcmd} add deny log tcp from 58.14.0.0/15 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 58.16.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 58.24.0.0/15 to any setup via ${oif}
        # CHINANET (CN) 58.32.0.0 - 58.63.255.255
        # spam from 58.50.50.89
        ${fwcmd} add deny log tcp from 58.32.0.0/11 to any setup via ${oif}
        # PLDSL (PH) 58.69.0.0/16 - 58.69.74.78
        ${fwcmd} add deny log all from 58.69.0.0/16 to any 25 setup via ${oif}
        # KRNIC, DACOM Corporation (KR) 58.72.0.0.0 - 58.79.255.255
        ${fwcmd} add deny log tcp from 58.72.0.0/13 to any setup via ${oif}
        # spam from 58.140.81.189/14 C&M Communication Co., Ltd. (KR)
        ${fwcmd} add deny log tcp from 58.140.81.189/14 to any setup via ${oif}
        # ONSE Telecom Co. (KR)
        ${fwcmd} add deny log all from 58.180.0.0/16 to any 25 setup via ${oif}
        # CRACKER'S CERNET BLOCK 58.200.0.0 - 58.207.255.255
        ${fwcmd} add deny log tcp from 58.200.0.0/13 to any setup via ${oif}
        # CRACKER'S KOREAN NET BLOCK 58.224.0.0 - 58.239.255.255
        # CRACKER'S CNC NET BLOCK 58.240.0.0 - 58.255.255.255
        ${fwcmd} add deny log tcp from 58.224.0.0/11 to any setup via ${oif}
        # KORNET (KR)
        ${fwcmd} add deny log all from 59.0.0.0/11 to any 25 setup via ${oif}
        # China Telcom (CN)
        ${fwcmd} add deny log all from 59.32.0.0/11 to any 25 setup via ${oif}
        # Bharat Sanchar Nigam Limited (IN) in BSNL Net 59.88.0.0 - 59.99.255.255
        # 59.93.200.137, 59.92.56.95
        ${fwcmd} add deny log all from 59.88.0.0/13 to any 25 setup via ${oif}
        ${fwcmd} add deny log all from 59.96.0.0/14 to any 25 setup via ${oif}
        # HNGAMES KOREA
        ${fwcmd} add deny log all from 59.150.49.29/23 to any 25 setup via ${oif}
        ${fwcmd} add deny log all from 59.150.50.0/24 to any 25 setup via ${oif}
        # FORVALCREATIVE (JP) in UCOM 59.158.0.0/15
        ${fwcmd} add deny log all from 59.159.38.244/28 to any 25 setup via ${oif}
        # CNC (CN) 60.0 - 60.31.255.255
        ${fwcmd} add deny log all from 60.1.114.15/11 to any 25 setup via ${oif}
        # Telekom Malaysia Berhad (MY) 60.48.0.0 - 60.54.255.255
        ${fwcmd} add deny log all from 60.49.29.117/14 to any 25 setup via ${oif}
        ${fwcmd} add deny log all from 60.52.0.0/15 to any 25 setup via ${oif}
        ${fwcmd} add deny log all from 60.54.0.0/16 to any 25 setup via ${oif}
        # CHINANET (CN)
        ${fwcmd} add deny log all from 60.180.7.149/11 to any 25 setup via ${oif}
        # DXNET - Beijing Teletron Telecom Engineering Co., Ltd.
        ${fwcmd} add deny log all from 60.195.220.23/15 to any 25 setup via ${oif}
        # KR BLOCK BORANET - DACOM
        ${fwcmd} add deny log tcp from 60.196.69.248/15 to any setup via ${oif}
        # CNC Group etc. (CN) 60.218.24.204/12
        ${fwcmd} add deny log tcp from 60.208.0.0/12 to any setup via ${oif}
        # Vocational Education Commission (TH)
        ${fwcmd} add deny log all from 61.19.233.86/22 to any 25 setup via ${oif}
        # Taiwan Fixed Network CO.,LTD.
        ${fwcmd} add deny log all from 61.30.237.85/15 to any 25 setup via ${oif}
        # CRACKERS' HEAVEN BORANET - DACOM (KR)
        ${fwcmd} add deny log tcp from 61.32.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 61.40.0.0/14 to any setup via ${oif}
        # Daqing Zhongji Petroleum Communication Construction Co.,Ltd. (CN)
        ${fwcmd} add deny log tcp from 61.47.128.0/18 to any setup via ${oif}
        # CNC (CN) 61.48.0.0 - 61.55.255.255
        ${fwcmd} add deny log all from 61.51.109.178/13 to any 25 setup via ${oif}
        # Diyixian.com(TW)Ltd. (TW)
        ${fwcmd} add deny log all from 61.56.94.12/20 to any 25 setup via ${oif}
        # CRACKER'S HEAVEN KOREAN NETWORK BLOCK 61.72 - 61.85
        ${fwcmd} add deny log tcp from 61.72.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 61.80.0.0/14 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 61.84.0.0/15 to any setup via ${oif}
        # CRACKER'S HEAVEN KOREAN NETWORK BLOCK 61.96 - 61.111
        ${fwcmd} add deny log tcp from 61.96.0.0/12 to any setup via ${oif}
        # THE CRIMINALS' CHINA NETWORK 61.128.0.0 - 61.191.255.255
        ${fwcmd} add deny log tcp from 61.128.0.0/10 to any setup via ${oif}
        # CNCGROUP Beijing province network (CN)
        ${fwcmd} add deny log all from 61.149.148.74/15 to any 25 setup via ${oif}
        # CHINANET Shanghai province network (CN)
        ${fwcmd} add deny log all from 61.173.35.214/15 to any 25 setup via ${oif}
        # billboard Ltd. (JP)
        ${fwcmd} add deny log tcp from 61.195.174.146/27 to any 25 setup via ${oif}
        # CRACKER'S HEAVEN TAIWAN NETWORK BLOCK 61.216 - 61.231
        ${fwcmd} add deny log tcp from 61.216.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 61.224.0.0/13 to any setup via ${oif}
        # KOREA 61.248.0.0 - 61.255.255.255
        ${fwcmd} add deny log tcp from 61.248.0.0/13 to any setup via ${oif}
        # NRTC (US)
        ${fwcmd} add deny log all from 64.178.255.27/19 to any 25 setup via ${oif}
        # Comcast Cable Communications, Inc. 68.32.0.0 - 68.63.255.255
        # spam from 68.63.53.155
        ${fwcmd} add deny log all from 68.32.0.0/11 to any 25 setup via ${oif}
        # TIM TAKA-050715211731, Plano, TX, 75075. US in SBC (71.128.0.0/11)
        ${fwcmd} add deny log all from 71.133.219.178/29 to any 25 setup via ${oif}
        # 80.255.40.240/28 Independent Telephone Network Mayo wa (NG)
        ${fwcmd} add deny log tcp from 80.255.40.240/28 to any setup via ${oif}
        # ProXad network (FR) 82.224.0.0 - 82.255.255.255
        ${fwcmd} add deny log tcp from 82.224.0.0/11 to any setup via ${oif}
        # TPNET (PL) 83.0.0.0 - 83.31.255.255
        ${fwcmd} add deny log tcp from 83.0.0.0/11 to any setup via ${oif}
        # RIMA Telefonica de Espana SAU (ES) 83.32.0.0 - 83.63.255.255
        ${fwcmd} add deny log tcp from 83.32.0.0/11 to any setup via ${oif}
        # 88.243.128.0 - 88.243.255.255 TurkTelekom (TR)
        ${fwcmd} add deny log tcp from 88.243.128.0/17 to any setup via ${oif}
        # CHINA 116.1.0.0 - 116.11.255.255
        ${fwcmd} add deny log tcp from 116.1.0.0/16 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 116.2.0.0/15 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 116.4.0.0/14 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 116.8.0.0/14 to any setup via ${oif}
        # CHINA 116.16.0.0 - 116.31.255.255
        ${fwcmd} add deny log tcp from 116.16.0.0/12 to any setup via ${oif}
        # Eastern Telecom Philippines Inc. (PH)
        ${fwcmd} add deny log tcp from 117.104.240.0/20 to any setup via ${oif}
        # CHTD (TW) 118.160.0.0 - 118.171.255.255
        ${fwcmd} add deny log tcp from 118.160.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 118.168.0.0/14 to any setup via ${oif}
        # CHINA 121.8.0.0 - 121.43.255.255
        ${fwcmd} add deny log tcp from 121.8.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 121.16.0.0/12 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 121.32.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 121.40.0.0/14 to any setup via ${oif}
        # BeiJing Kuandaitong Telecom Technology Co.,Ltd
        # 121.68.0.0 - 121.71.255.255 spam from 121.69.243.93
        ${fwcmd} add deny log tcp from 121.68.0.0/14 to any setup via ${oif}
        # CHINA 122.4.0.0 - 122.15.255.255
        ${fwcmd} add deny log tcp from 122.4.0.0/14 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 122.8.0.0/13 to any setup via ${oif}
        # POWERCOMM (KR) 122.32.0.0 - 122.47.255.255
        ${fwcmd} add deny log tcp from 122.32.0.0/12 to any setup via ${oif}
        # CHTD, Chunghwa Telecom Co.,Ltd. (TW) 122.120.0.0 - 122.127.255.255
        ${fwcmd} add deny log tcp from 122.120.0.0/13 to any setup via ${oif}
        # CHINA 122.136.0.0/13 CNC Group CHINA169 Jilin Province Network
        ${fwcmd} add deny log tcp from 122.136.0.0/13 to any setup via ${oif}
        # CHINA 123.144.0.0 - 123.175.255.255
        ${fwcmd} add deny log tcp from 123.144.0.0/12 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 123.160.0.0/12 to any setup via ${oif}
        # CHINA 123.177.0.0 - 123.191.255.255
        ${fwcmd} add deny log tcp from 123.177.0.0/16 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 123.178.0.0/15 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 123.180.0.0/14 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 123.184.0.0/13 to any setup via ${oif}
        # Globe Telecom/Innove Communication (PH)
        ${fwcmd} add deny log tcp from 124.6.128.0/18 to any setup via ${oif}
        # CHINA 124.20.0.0 - 124.21.255.255
        ${fwcmd} add deny log tcp from 124.20.0.0/15 to any setup via ${oif}
        # Beijing Guanghuan Xinwang Digital Technology co.Ltd (CN)
        ${fwcmd} add deny log all from 124.42.3.196/17 to any 25 setup via ${oif}
        # CHINA 124.88.0.0 - 124.95.255.255
        ${fwcmd} add deny log tcp from 124.88.0.0/13 to any setup via ${oif}
        # MURAMATSU ENTERPRISE (PH) 124.105.60.80 - 124.105.60.95
        ${fwcmd} add deny log tcp from 124.105.60.80/28 to any setup via ${oif}
        # 124.120.64.0 - 124.120.127.255 TRUE IP ADMINISTRATION (TH)
        ${fwcmd} add deny log tcp from 124.120.64.0/18 to any setup via ${oif}
        # CHINA SMALL BLOCK 124.147.128.0/17
        ${fwcmd} add deny log tcp from 124.147.128.0/17 to any setup via ${oif}
        # CHINA 124.200.0.0 - 124.207.255.255
        ${fwcmd} add deny log tcp from 124.200.0.0/13 to any setup via ${oif}   
        # CHINA large block: 124.220.0.0 - 124.240.127.255
        ${fwcmd} add deny log tcp from 124.220.0.0/14 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 124.224.0.0/12 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 124.240.0.0/17 to any setup via ${oif}
        # TOT public company limited (TH)
        # spam from 125.24.78.117
        ${fwcmd} add deny log tcp from 125.24.0.0/15 to any setup via ${oif}
        # KR BLOCK 125.57.0.0/16
        # spam from 125.57.107.139 (NAWOO-DESIGN KR PUSAN)
        ${fwcmd} add deny log tcp from 125.57.107.139/16 to any setup via ${oif}
        # 125.58.128.0 - 125.58.255.255 China Daqing ofTechnology Network
        # spam from 125.58.137.109
        ${fwcmd} add deny log tcp from 125.58.128.0/17 to any setup via ${oif}
        # CHINA 125.64.0.0 - 125.98.255.255
        ${fwcmd} add deny log tcp from 125.64.0.0/11 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 125.96.0.0/15 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 125.98.0.0/16 to any setup via ${oif}
        # CHINA 125.104.0.0 - 125.127.255.255
        ${fwcmd} add deny log tcp from 125.104.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 125.112.0.0/12 to any setup via ${oif}
        # KR BLOCK BORANET - DACOM
        ${fwcmd} add deny log tcp from 125.187.32.139/12 to any setup via ${oif}
        # KR BLOCK 125.240.0.0 - 125.252.63.255
        ${fwcmd} add deny log tcp from 125.240.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 125.248.0.0/14 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 125.252.0.0/18 to any setup via ${oif}
        # Telstra Internet (US)
        ${fwcmd} add deny log all from 144.140.19.229/16 to any 25 setup via ${oif}
        # Rock Hill Telephone Company (US)
        ${fwcmd} add deny log all from 165.166.232.85/24 to any 25 setup via ${oif}
        # Telefonica de Argentina (AR) 190.48.0.0 - 190.50.2552.55
        # spam from 190.49.176.115
        ${fwcmd} add deny log all from 190.48.0.0/15 to any 25 setup via ${oif}
        ${fwcmd} add deny log all from 190.50.0.0/16 to any 25 setup via ${oif}
        # NTT America, Inc.192.220.112.4/32
        ${fwcmd} add deny log tcp from 192.220.112.4/32 to any setup via ${oif}
        # Hyspec - Spidersat Communications (GH)
        ${fwcmd} add deny log tcp from 193.220.59.0/25 to any setup via ${oif}
        # Telemar Norte Leste S.A. (BR)
        # spam from 200.216.166.168
        ${fwcmd} add deny log tcp from 200.216.0.0/16 to any setup via ${oif}
        # Brasil Telecom (BR)
        ${fwcmd} add deny log all from 201.14.93.175/16 to any 25 setup via ${oif}
        # Telemar Norte Leste S.A. (BR) - spam from 201.19.211.196
        ${fwcmd} add deny log all from 201.18.0.0/15 to any 25 setup via ${oif}
        # TELEFONICA EMPRESAS S/A - spam from 201.28.165.23
        ${fwcmd} add deny log all from 201.28.128.0/17 to any 25 setup via ${oif}
        # Telefonica del Peru S.A.A (PE)
        ${fwcmd} add deny log all from 201.240.215.55/17 to any 25 setup via ${oif}
        # Exatt Technologies Pvt. Ltd. (IN)
        ${fwcmd} add deny log tcp from 202.63.160.0/19 to any setup via ${oif}
        # CPCNet Hong Kong Ltd. (HK)
        ${fwcmd} add deny log all from 202.66.134.114/16 to any 25 setup via ${oif}
        # Telekom Multimedia of Telekom Malaysia 202.71.96.0 - 202.71.111.255
        ${fwcmd} add deny log all from 202.71.96.0/20 to any 25 setup via ${oif}
        # TELEKOM MALAYSIA (MY) 202.75.32.0.0 - 202.75.63.255
        ${fwcmd} add deny log all from 202.75.58.168/19 to any 25 setup via ${oif}
        # CHINA 202.90.0.0 - 202.122.128.255
        ${fwcmd} add deny log tcp from 202.90.0.0/15 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 202.92.0.0/14 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 202.96.0.0/12 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 202.112.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 202.120.0.0/15 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 202.122.0.0/17 to any setup via ${oif}
        # LUV-TH THAI
        ${fwcmd} add deny log all from 202.149.107.19/28 to any 25 setup via ${oif}
        # Singtel Taiwan Limited (TW) 202.165.128.0 - 202.165.159.255
        ${fwcmd} add deny log all from 202.165.128.0/19 to any 25 setup via ${oif}
        # INTERLINK (JP) 202.171.139.32/27
        ${fwcmd} add deny log tcp from 202.171.139.32/27 to any setup via ${oif}
        # CTM Internet Services (MO)
        ${fwcmd} add deny log all from 202.175.18.237/17 to any 25 setup via ${oif}
        # Digital United Inc. TAIWAN
        ${fwcmd} add deny log all from 203.67.18.85/16 to any 25 setup via ${oif}
        # DEFENSNET, Hosting Service (PH)
        ${fwcmd} add deny log all from 203.82.16.239/21 to any 25 setup via ${oif}
        # 203.90.128.0 - 203.90.223.255 SPAMMER DQTNET (CN)
        ${fwcmd} add deny log tcp from 203.90.128.0/18 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 203.90.192.0/19 to any setup via ${oif}
        # New World Telephone (HK)
        ${fwcmd} add deny log all from 203.98.176.41/18 to any 25 setup via ${oif}
        # DITIZONE (KR) 203.128.192.0 203.128.223.255
        ${fwcmd} add deny log tcp from 203.128.192.0/19 to any setup via ${oif}\
        # Livedoor DATAHOTEL Japan
        ${fwcmd} add deny log all from 203.131.198.74/20 to any 25 setup via ${oif}
        # Globe Telecom (PH) 203.177.0.0 - 203.177.255.255
        ${fwcmd} add deny log tcp from 203.177.0.0/16 to any setup via ${oif}
        # asiainfra.com TAIWAN
        ${fwcmd} add deny log all from 203.207.14.21/20 to any 25 setup via ${oif}
        # 210.48.144.0 - 210.48.159.255 TM NET SDN BHD
        ${fwcmd} add deny log tcp from 210.48.144.0/20 to any setup via ${oif}
        # seednet (TW)
        ${fwcmd} add deny log all from 210.68.29.33/16 to any 25 setup via ${oif}
        # CHINA 210.72.0.0 - 210.78.255.255
        ${fwcmd} add deny log tcp from 210.72.0.0/14 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 210.76.0.0/15 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 210.78.0.0/16 to any setup via ${oif}
        # CRACKER'S HEAVEN KOREAN NETWORK BLOCK 210.90.0.0 - 210.127.255.255
        ${fwcmd} add deny log tcp from 210.90.0.0/15 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 210.92.0.0/14 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 210.96.0.0/11 to any setup via ${oif}
        # CRACKER'S HEAVEN KOREAN NETWORK BLOCK 210.178 - 210.183
        ${fwcmd} add deny log tcp from 210.178.0.0/15 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 210.180.0.0/14 to any setup via ${oif}
        # Asia Pacific Online Service TAIWAN
        ${fwcmd} add deny log all from 210.200.17.203/15 to any 25 setup via ${oif}
        ${fwcmd} add deny log all from 210.202.7.175/16 to any 25 setup via ${oif}
        # New World Telephone (HK) 210.245.128.0 - 210.245.255.255
        # 210.245.160.5
        # includes Anson Chan HONGKONG 210.245.197.179/27
        ${fwcmd} add deny log all from 210.245.128.0/17 to any 25 setup via ${oif}
        # CRACKER'S HEAVEN TAIWAN NETWORK - CHTD 211.20.0.0-211.23.255.255
        ${fwcmd} add deny log tcp from 210.20.0.0/14 to any setup via ${oif}
        # SPAMMERS' PARADISE SAINET (JP)
        ${fwcmd} add deny log tcp from 210.236.32.0/22 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 210.236.48.0/21 to any setup via ${oif}
        # CRACKER'S HEAVEN KOREAN NETWORK BLOCK 211.32 - 211.63
        ${fwcmd} add deny log tcp from 211.55.6.32/11 to any setup via ${oif}
        # ELIMNET KOREA
        ${fwcmd} add deny log all from 211.52.113.143/24 to any 25 setup via ${oif}
        ${fwcmd} add deny log all from 211.52.116.45/24 to any 25 setup via ${oif}
        # China United Telecommunications Corporation 211.94.137.58
        ${fwcmd} add deny log all from 211.90.0.0/15 to any 25 setup via ${oif}
        ${fwcmd} add deny log all from 211.92.0.0/14 to any 25 setup via ${oif}
        ${fwcmd} add deny log all from 211.96.0.0/15 to any 25 setup via ${oif}
        # CRACKER'S HEAVEN KOREAN NETWORK BLOCK 211.104 - 211.119
        # ssh root login attempt from Hanaro Telcom 211.108.60.184
        # spammer KORNET 211.106.77.44, 211.112.12.206
        ${fwcmd} add deny log tcp from 211.104.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 211.112.0.0/13 to any setup via ${oif}
        # CHINA 211.136.0.0 - 211.167.255.255
        # 211.140.138.138, 211.140.138.138, 211.147.7.47, 211.152.50.50
        # 211.154.205.252, 211.155.245.155
        ${fwcmd} add deny log tcp from 211.136.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 211.144.0.0/12 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 211.160.0.0/13 to any setup via ${oif}
        # CRACKER'S HEAVEN KOREAN NETWORK BLOCK 211.168 - 211.255
        ${fwcmd} add deny log tcp from 211.168.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 211.176.0.0/12 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 211.192.0.0/10 to any setup via ${oif}
        # CHINA
        ${fwcmd} add deny log all from 218.18.121.245/11 to any 25 setup via ${oif}
        ${fwcmd} add deny log all from 218.32.0.0/12 to any 25 setup via ${oif}
        # CRACKER'S HEAVEN KOREAN NETWORK BLOCK
        ${fwcmd} add deny log tcp from 218.48.0.0/13 to any setup via ${oif}
        # CHINA
        ${fwcmd} add deny log tcp from 218.56.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 218.64.0.0/11 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 218.96.0.0/14 to any setup via ${oif}
        # CRACKER'S HEAVEN CHINA 218.104.0.0 -218.109.255.255
        ${fwcmd} add deny log tcp from 218.104.0.0/14 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 218.108.0.0/15 to any setup via ${oif}
        # CRACKER'S HEAVEN KOREAN NETWORK BLOCK
        # ssh root login attempt from KOREA-TELECOM 218.144.0.0 - 218.159.255.255
        # attacker - 218.153.147.92, spammer - 218.149.164.75
        ${fwcmd} add deny log tcp from 218.144.0.0/12 to any setup via ${oif}
        # HINET CHTD (TW) 218.160.0.0-218.175.255.255
        ${fwcmd} add deny log tcp from 218.160.0.0/12 to any setup via ${oif}
        # Asia Pacific Online Service TAIWAN
        ${fwcmd} add deny log all from 218.187.39.100/16 to any 25 setup via ${oif}
        # CHINA MOBILE COMMUNICATIONS 218.200.0.0 - 218.207.255.255
        # spammer 218.206.74.169
        ${fwcmd} add deny log tcp from 218.200.0.0/13 to any setup via ${oif}
        # New Century InfoComm Tech. Co., Ltd. (TW)
        ${fwcmd} add deny log tcp from 218.210.0.0/15 to any setup via ${oif}
        # StarHub Cable Vision Ltd, TAIWAN
        ${fwcmd} add deny log all from 218.212.146.16/16 to any 25 setup via ${oif}
        # ssh root login attempt from CRIMINALS' NETWORK HANARO (KR)
        ${fwcmd} add deny log tcp from 218.232.0.0/13 to any setup via ${oif}
        # CHINA Network block
        # ssh root login attempt from DXNET (CN) 218.247.0.161/19
        # SI BO WAN DA LTD,CO 218.241.83.79/23+
        ${fwcmd} add deny log tcp from 218.240.0.0/13 to any setup via ${oif}
        # DXTNET (CN)
        ${fwcmd} add deny log all from 218.249.18.59/16 to any 25 setup via ${oif}
        # Kai Creates Inc. (JP)
        ${fwcmd} add deny log all from 219.118.68.254/20 to any 25 setup via ${oif}
        # CHINANET etc (CN)
        ${fwcmd} add deny log all from 219.144.152.117/11 to any 25 setup via ${oif}
        # THE CRIMINALS' NETWORKS IN CHINA 219.216.0.0 - 219.239.255.255
        #  INCLUDES CERNET, BEIJING GEHUA CATV NETWORK 219.236.18.67
        ${fwcmd} add deny log tcp from 219.216.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 219.224.0.0/12 to any setup via ${oif}
        # HANARO (KR)
        ${fwcmd} add deny log tcp from 219.240.0.0/15 to any setup via ${oif}
        # THE CRIMINALS' NETWORKS IN KOREA 219.248.0.0 - 219.255.255.255
        ${fwcmd} add deny log tcp from 219.248.0.0/13 to any setup via ${oif}
        # cracker's heaven korean network block 220.64 - 220.95.255.255
        ${fwcmd} add deny log tcp from 220.64.0.0/11 to any setup via ${oif}
        # cracker's heaven korean network block 220.116 - 220.127
        ${fwcmd} add deny log tcp from 220.116.0.0/14 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 220.120.0.0/13 to any setup via ${oif}
        # CHINANET-CN 220.160.0.0 - 220.191.255.255 220.190.145.47
        ${fwcmd} add deny log all from 220.160.0.0/11 to any 25 setup via ${oif}
        # UNICOM (CN)
        ${fwcmd} add deny log all from 220.192.241.39/12 to any 25 setup via ${oif}
        # spammer : Reliance Infocom Ltd 220.224.0.0 - 220.227.255.255
        ${fwcmd} add deny log tcp from 220.224.0.0/14 to any setup via ${oif}
        # IT-Solution TAIWAN
        ${fwcmd} add deny log all from 220.229.241.205/24 to any 25 setup via ${oif}
        # DREAMS Korea
        ${fwcmd} add deny log all from 220.230.99.73/16 to any 25 setup via ${oif}
        # CNC (CN) 220.248.0.0 - 220.252.255.255
        ${fwcmd} add deny log tcp from 220.248.0.0/14 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 220.252.0.0/16 to any setup via ${oif}
        # CNC GROUP CHINA 221.0.0.0 - 221.12.191.255
        ${fwcmd} add deny log all from 221.2.174.34/13 to any 25 setup via ${oif}
        ${fwcmd} add deny log all from 221.9.217.81/14 to any 25 setup via ${oif}
        ${fwcmd} add deny log all from 221.12.0.0/17 to any 25 setup via ${oif}
        ${fwcmd} add deny log all from 221.12.128.0/18 to any 25 setup via ${oif}
        # CETC-CHINACOMM COMMUNICATIONS Co.,Ltd. (CN) 221.122.0.0 - 221.123.255.255
        # spammer 221.122.141.241
        ${fwcmd} add deny log tcp from 221.122.0.0/15 to any setup via ${oif}
        # spammer EXATTNET (IN) 221.128.128.0 - 221.128.255.255
        ${fwcmd} add deny log tcp from 221.128.128.0/17 to any setup via ${oif}
        # KOREA TELCOM (KR)
        ${fwcmd} add deny log tcp from 221.144.0.0/12 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 221.160.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 221.168.0.0/16 to any setup via ${oif}
        # CNC GROUP CHINA 221.192.0.0 - 221.223.255.255
        # 221.201.105.37, 221.207.172.170, 221.214.200.159, 221.219.26.242
        ${fwcmd} add deny log all from 221.192.0.0/11 to any 25 setup via ${oif}
        # CHINANET 221.224.0.0-221.239.255.255
        # 221.239.132.169
        ${fwcmd} add deny log all from 221.226.164.38/12 to any 25 setup via ${oif}
        # CHINA RAILWAY TELECOMMUNICATIONS CENTER 222.32.0.0 - 222.63.255.255
        ${fwcmd} add deny log all from 222.58.54.205/11 to any 25 setup via ${oif}
        # CHINANET 222.64.0.0 - 222.95.255.255
        ${fwcmd} add deny log all from 222.94.77.202/11 to any 25 setup via ${oif}
        # CRACKER'S HEAVEN KOREAN NETWORK BLOCK 222.96 - 222.122
        ${fwcmd} add deny log tcp from 222.96.0.0/12 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 222.112.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 222.120.0.0/15 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 222.122.0.0/16 to any setup via ${oif}
        # Globe Telecom (PH) 222.127.0.0 - 222.127.127.255
        ${fwcmd} add deny log tcp from 222.127.0.0/17 to any setup via ${oif}   
        # CNC GROUP (CN) 222.128.0.0 - 222.143.255.255
        # spam from 222.133.125.20
        ${fwcmd} add deny log tcp from 222.128.0.0/12 to any setup via ${oif}
        # AT NEXT / Watanabe, Yuta (JP) 222.151.195.16/28
        ${fwcmd} add deny log tcp from 222.151.195.16/28 to any setup via ${oif}
        # CHINANET (CN) 222.168.0.0 - 222.191.255.255
        # spam points to 222.168.39.123 (qwpr.com)
        ${fwcmd} add deny log tcp from 222.168.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 222.176.0.0/12 to any setup via ${oif}
        # CRIMINALS' HEAVEN CHINA NETWORK BLOCK 222.208.0.0 - 222.223.255.255
        # 222.216.27.40
        ${fwcmd} add deny log tcp from 222.208.0.0/12 to any setup via ${oif}
        # SPAMMER'S HEAVEN KOREAN NETWORK BLOCK
        # 222.231.0.0 - 222.231.63.255 LG DACOM KIDC (KR)
        ${fwcmd} add deny log tcp from 222.231.0.0/18 to any setup via ${oif}
        # Hanaro TELECOM - HANNET 222.232.0.0/13
        ${fwcmd} add deny log all from 222.233.52.5/13 to any 25 setup via ${oif}
        # CHINA 222.240.0.0 - 222.249.255.255
        ${fwcmd} add deny log tcp from 222.240.0.0/13 to any setup via ${oif}
        ${fwcmd} add deny log tcp from 222.248.0.0/15 to any setup via ${oif}
        # Vietnam Posts and Telecommunications (VN)
        ${fwcmd} add deny log tcp from 222.252.0.0/14 to any setup via ${oif}