fixed incorrect field names for IP address policy clauses, and added exact IP address matching