masked_match
return (masked_match(tok, mask, eval_hostaddr(host)));
static int masked_match(char *, char *, char *);