Change a few counts to unsigned int.
Assert that the number of zap targets is in range.
Fix IPv6 masking in DRDoS checking.