add packet filtering support; set netmask before interface addr