added subnet mask matching to ip route statements