ipmatching: robustness fix