big refactoring: iptables Rule format only, iputil cidr ranges overlaps, REST API netmask support and more