accept CIDR as well as Netmask in error check