http://www.cymru.com/Documents/bogon-dd.html
Some Class A in, some out. Also, if you use the bogon list for your bind blackhole, update that, too. /Received\: .*\[ (0\. |1\. |2\. |5\. |7\. |23\. |27\. |31\. |36\. |37\. |39\. |41\. |42\. |49\. |50\. |58\. |59\. |71\. |72\. |73\. |74\. |75\. |76\. |77\. |78\. |79\. |85\. |86\. |87\. |88\. |89\. |90\. |91\. |92\. |93\. |94\. |95\. |96\. |97\. |98\. |99\. |100\. |101\. |102\. |103\. |104\. |105\. |106\. |107\. |108\. |109\. |110\. |111\. |112\. |113\. |114\. |115\. |116\. |117\. |118\. |119\. |120\. |121\. |122\. |123\. |124\. |125\. |126\. |169\.254\. |173\. |174\. |175\. |176\. |177\. |178\. |179\. |180\. |181\. |182\. |183\. |184\. |185\. |186\. |187\. |189\. |190\. |197\. |223\. |224\.)/x REJECT ACL header_checks_bogon Message contains a Received: header containing a forbidden "bogon" IP address from an unassigned Class A network. See http://www.cymru.com/Documents/bogon-list.html, IP = "[$1]"
