constraints_normalize_ip_addrblocks
constraints_normalize_ip_addrblocks(fn, &allow_addrs);
constraints_normalize_ip_addrblocks(fn, &deny_addrs);