This one has the advantage of actually working :) I had to blacklist some hosts because they would either outright refuse connections or would refuse my LDAP credentials.