Don't try to be cute with magic values like "any" here, since the netmask is probably more easily understood in "slash notation".