Hi,
First of all, congratulations on the excellent work you've done with cPFence.
While using Tools & Utilities → Spam AutoShield Tools → Block / Unblock IP, we noticed that the feature only accepts individual IP addresses.
For example, when attempting to block the following network:
103.166.184.0/23
the system returns the following error:
$$
[ERROR] '103.166.184.0/23' is not a valid IPv4 or IPv6 address format.
$$
We would like to suggest adding support for CIDR notation (for example /24, /23, /16, etc.).
Instead of requiring administrators to block every IP address individually, cPFence could accept a CIDR range and internally expand it, automatically applying the block to every IP address within that network.
This would be particularly useful when dealing with spam campaigns originating from entire network ranges, where it's common to block dozens or even hundreds of IPs belonging to the same subnet. Besides making administration much easier, it would significantly reduce the time required to apply these blocks and help prevent accidentally missing IP addresses within the same range.
Even if cPFence continues to store blocked addresses as individual IPs internally, allowing administrators to enter a CIDR range directly would be a valuable usability improvement.
Would this be something you would consider implementing in a future release of cPFence?
Thank you for your consideration, and keep up the great work!
