fix matching problems of IP wildcarding