Shorewall Question

[Michael Pratt]

I want to block the entire Asian Pacific Network from my network. The reason is I keep getting 
virus attachments from this network and attempted relays from this nettork. This is the info.

NetRange:   222.0.0.0 - 222.255.255.255 
CIDR:       222.0.0.0/8 
NetName:    APNIC8
NetHandle:  NET-222-0-0-0-1
Parent:     
NetType:    Allocated to APNIC
NameServer: NS1.APNIC.NET
NameServer: NS3.APNIC.NET
NameServer: NS4.APNIC.NET
NameServer: NS.RIPE.NET
NameServer: TINNIE.ARIN.NET

This is what I put in my Shorewall config.
DROP:info       net:222.0.0.0/8 fw      tcp     -       -       -       -       -

I am obviously setting something wrong because they are still getting in.

Can you help me out?

Thanks!

Mike