Reject rules that use the wrong type to match against IP fields.
Reject rules that use the wrong type to match against IP fields.

Signed-off-by: David Anderson <93b19e97294520db5d300a69ac27bdbeaec3051d@tailscale.com>

inetaf/wf,inetaf/wf