IP netmask is not an IP address
The netmask validation should validate an IPv4 netmask and not an IPv4 address:
Also, we should support /xx
form, which is much easier to both write and verify as well. (See turris/foris-controller/foris-controller#137 and turris/foris-controller/foris-controller#146 (closed)