Convert CIDR netblock listings to /etc/hosts.deny format