support for masked IP src and dst