Thanks macko003. I cant actually disable the pipline rules, if I do then I lose all whois lookups. According to the plugin documentation RFC1918 addresses are excluded from being looked up, but from the logs i’m seeing they actually are.
If its not a config error then is it maybe a bug?
Oh and if it is a condition I need to add why isn’t this mentioned in the setup documentation?..Let me guess, it is in the Enterprise version?