Simple IP restriction not working with /29 addresses

BigIP version BIG-IP 9.4.8 Build 355.0 Final

 

 

Here is my simple rule:

 

 

when HTTP_REQUEST {

 

if {[matchclass [IP::client_addr] equals $::IPs]}{

 

} else {

 

HTTP::respond 403 content "403 - Forbidden"

 

log local0.info "ENV-BIGIP1500: Client Rejected IP:[IP::client_addr]"

 

discard

 

}

 

}

 

 

I have the datagroup like this:

 

 

IPs

 

 

x.x.x.38/255.255.255.248 (not really x's)

 

 

When I try and come in I get a

 

 

Mar 15 07:56:31 tmm tmm[1838]: Rule Bosp_IPs : ENV-BIGIP1500: Client Rejected IP:x.x.x.36

 

 

in the logs.

 

 

That /29 address should allow 33-38 addresses to come through...Any thoughts on what could be wrong?