I know it's possible to put CIDR ip ranges in a lookup table. However, my question is, what if I do not have access to modify the transforms.conf file directly and matchtype is now shown in the advanced area of the lookup definitions (I'm using 6.1). Is there a way to use something similar to matchtype in a regular query search so I can acquire the same type of results even if it's not specified in the transforms.conf file?
The following code will take that list and compare it to a field called 'my_ip' and return a list of IP addresses that match at least one of the cidr ranges. The myfield* fields are optional and are simply there to pass other fields out of the map command. Be sure to set maxsearches to a value higher than the number of cidrs in you lookup file.