tweaked this to take any address, not just a network address - the latter is derived from the former by using the prefix length (this makes it easier to progressively widen the scope);