i have not tested this  so it might be stupid within the scope of a single router we will not have overlapping ips  could it be possible just loading the subnet and verifying whether fip db  fixed ip address falls into the subnet s cidr  the advantage would be doing a single query for the subnet instead of a query on ports table for each port 