handle invalid IP specs

no reversed ranges
no ranges outside 0-255