diff --git a/defaults/yacy.network.freeworld.unit b/defaults/yacy.network.freeworld.unit
index a1df98a0b..e2db27f6a 100644
--- a/defaults/yacy.network.freeworld.unit
+++ b/defaults/yacy.network.freeworld.unit
@@ -31,5 +31,5 @@ network.unit.update.location3 = http://www.yacystats.de/yacybuild/
 network.unit.protocol.control = uncontrolled
 
 # white/blacklists
-network.unit.access.whitelist = 10.*,127.*,172.16.*,169.254.*,192.168.*,localhost
+network.unit.access.whitelist = 10\..*,127.*,172.(1[6-9]|2[0-9]|3[0-1])\..*,169.254.*,192.168.*,localhost
 network.unit.access.blacklist =
\ No newline at end of file
diff --git a/defaults/yacy.network.intranet.unit b/defaults/yacy.network.intranet.unit
index be7a80b2b..4b56e1fa8 100644
--- a/defaults/yacy.network.intranet.unit
+++ b/defaults/yacy.network.intranet.unit
@@ -26,5 +26,5 @@ network.unit.update.location3 = http://www.yacystats.de/yacybuild/
 network.unit.protocol.control = uncontrolled
 
 # white/blacklists
-network.unit.access.whitelist = 10.*,127.*,172.16.*,169.254.*,192.168.*,localhost
+network.unit.access.whitelist = 10\..*,127.*,172.(1[6-9]|2[0-9]|3[0-1])\..*,169.254.*,192.168.*,localhost
 network.unit.access.blacklist =
\ No newline at end of file
diff --git a/defaults/yacy.network.readme b/defaults/yacy.network.readme
index 5db8ad267..e480660fd 100644
--- a/defaults/yacy.network.readme
+++ b/defaults/yacy.network.readme
@@ -52,9 +52,9 @@
 # In contrast also a list of IPs may be given to be not allowed to access the peers at all
 # The YaCy-httpd will not respond on any request from IPs given in the blacklist
 # By default both lists should be empty to provide a basic search functionality for everyone.
-# When running a private YaCy network, all peers that are in the own networ should be configured
-# in the whitelist. Othervise the access from whitelistes clients is allowed, but the executing
-# search requests in the private network for a singe request from outside is also blocked.
+# When running a private YaCy network, all peers that are in the own network should be configured
+# in the whitelist. Otherwise the access from whitelisted clients is allowed, but the executing
+# search requests in the private network for a single request from outside is also blocked.
 # Put simply all IPs from you peers in the whitelist.
 # network.unit.access.whitelist =
 # network.unit.access.blacklist =
diff --git a/defaults/yacy.network.webportal.unit b/defaults/yacy.network.webportal.unit
index adcc169d1..5c0dddfa3 100644
--- a/defaults/yacy.network.webportal.unit
+++ b/defaults/yacy.network.webportal.unit
@@ -23,5 +23,5 @@ network.unit.update.location3 = http://www.yacystats.de/yacybuild/
 network.unit.protocol.control = uncontrolled
 
 # white/blacklists
-network.unit.access.whitelist = 10.*,127.*,172.16.*,169.254.*,192.168.*,localhost
+network.unit.access.whitelist = 10\..*,127.*,172.(1[6-9]|2[0-9]|3[0-1])\..*,169.254.*,192.168.*,localhost
 network.unit.access.blacklist =
\ No newline at end of file