wilderness - 1:15 pm on Apr 3, 2013 (gmt 0)
My dedicated firewall is full with individual ips.
I'm assuming your referring to the precise Class D?
This is a bad practice and leads to infinity.
When denying IP ranges you need to cover a wider range.
In the case of a server farm the entire range.
In the case of a private IP, the regional range, possibly with an additional condition of other criteria.