cidr masking and better ip proxy support