Since the wildcard IPs in the blacklist table would be of varying length (ex. 1.2.3. or 111.222.333.), wouldn't I have to get the length of each of those wilcard IPs first in order to set the substring length? And, if so, how would that be cycled? :0
I guess I could specify the wildcard length as a seperate field in the blacklist table, but I still don't understand how I would compare each of the main log's record IPs based on the length field of each of the wildcard IPs in the blacklist table.