use cidr for ip filter
clarify ip filter example