Add UFW rule with netmask