...with any source IP mask...