Add CIDR-matching utilities