add functionality to match against an ip network