it's not.  it's all messy.  plus i have some other things which compare accessible, in subnet, etc (using cidr code), will feed in separately.