Firewall: BUG 10528 - allow subnets greater than /8