Network/netmask to match (requires network be defined) ipv4 Inverse-mask to match