specify netmasks for private network