On Tue, 7 Jun 2016 20:30:32 +0200 Reindl Harald wrote:
> >> it is *plain wrong* doing *any* deep header tests on received > >> headers and you will *never* achieve enough to outweight the > >> fallout of hit innocent victims > > > > they're blocks of static addresses > > surely since "CSS lists both IPv4 addresses (/32) and IPv6 addresses > (/64)" and /32 is not a block but a single IP? It doesn't really matter whether the list internally uses addresses or address blocks, the important thing is that they aren't dynamic pool addresses.
