[PATCH] general-functions.pl: do not miscalculate when enumerating IPsec N2N subnet membership