The allow and deny elements define the IP addresses or address ranges to which an IP filter applies. The address or address range must appear together with a mask as a single allow or deny element masked IP value.
The masking procedures and examples shown here are based on IPv4 addresses, but are also applicable to IPv6 addresses.