This class needs to *invert* the low-level bitmask, i.e., if a port is matched, then the corresponding mask field need to be 0 else 1.
(Yes, that is confusing, which is why I want to hide it from the user).