One CIDR per line. Lines starting with # are comments. Networks must be canonical (host bits zero).