Issue #9: IP range check - check mask in exception list for policy.