Rename ipmask to set_ipmask and add some functionality: the netmask

is applied immediately to the address.

This way, the parsed rules output shows exactly which bits of an
address are significant for a match and errors due to wrong netmasks
can be spotted more easily.

Example:
$ pfctl -nvf -
pass in on lo0 from 172.17.0.0/12 to any
@0 pass in on lo0 inet from 172.16.0.0/12 to any

idea refined by dhartmei@
ok frantzen@ henning@

0 files changed, 0 insertions, 0 deletions