Extract exclude patterns to their own class; support netmasks