[Firewall] Add CIDR support