Yeah, I don't know what I'm talking about.

I guess someone just needs to educate Ron on how to filter entire subnets is all.

iptables -A INPUT -p tcp -s to.ko.sa.n/24 -j DROP

squee.