[Feature Request] Add support for wildcards in IPs for USER_IGNORELIST

[SCUR0]

I am wanting to ignore entire subnets and tried 10.227.*;*;*;*, 10.227.*.*;*;*;*, and 10.227.0.0/16;*;*;* in the file used for USER_IGNORELIST. None worked and thus I had to use 10\.227\.\d+\.\d+ in IGNORE_EVENTS_REGEX

Having support for wildcards in the USER_IGNORELIST would help make looking and configuring the ignore lists faster and require less steps.

[MikhailKasimov]

Hello!

Try this mechanism: https://github.com/stamparm/maltrail/blob/master/misc/ignore_events.txt

[SCUR0]

@MikhailKasimov you may need to reread my last reply. That is the mechanism I am talking about in the context of this request. I have it confirmed to work with rules that use full IPs, but never if I do a partial IP wildcards such as 10.227.*;*;*;*, 10.227.*.*;*;*;*, and 10.227.0.0/16;*;*;*
Partial wildcard IPs appear to be unsupported along with subnets for USER_IGNORELIST