Do your external sites really have an IP range that big? If not, you're allowing other customers of their ISP to use your email server. If they have just a single static IP, use /32 instead.