[mod_extforward] allow explict IPs to be untrusted (#2860)
[mod_extforward] allow explict IPs to be untrusted (#2860)

Allowing explicit IPs to be rejected might be useful in situations
where an internal network is to be allowed by CIDR mask, but there are
a small number of untrusted hosts on the network, e.g. hosts behind a
NAT to which some external ports are forwarded.

CIDR masks must be marked "trust", or else are ignored with a warning.

x-ref:
  "RFE: mod_extforward CIDR support"
  https://redmine.lighttpd.net/issues/2860

gstrauss/lighttpd1.4,gstrauss/lighttpd1.4,lighttpd/lighttpd1.4,gstrauss/lighttpd1.4,lighttpd/lighttpd1.4,gstrauss/lighttpd1.4,lighttpd/lighttpd1.4,lighttpd/lighttpd1.4,gstrauss/lighttpd1.4,lighttpd/lighttpd1.4,gstrauss/lighttpd1.4,lighttpd/lighttpd1.4