Dear Edwin,
Suspect there are some misunderstandings what can be configured in the NFS access control fields - failures of providing the correct syntax can lead to access errors. Not nice; but true. Beyond, I understand; the QNAP syntax and options differ from what can be supplied to a common /etc/exports usage.
Online Help wrote:Allowed IP address or domain name
The format of the allowed IP address or domain name is shown below:
1. Single server: A valid domain name, host name or an IP address that can be identified by the DNS server.
I can't tell you, what the exact meaning of
an IP address that can be identified by the DNS server is. Sorry my ignorance, have never tried with pure IP addresses - I'd have to ask somebody in Tw to run a test tomorrow, including the potentially "varying" (but risky) effects as you listed. As an old and lazy systems manager, I tend to use the much more flexible way of using DNS names (or NIS where available).
Online Help wrote:2. Use wildcard characters to specify a series of servers: Use “*” or “?” to specify the string criteria. When you use wildcard characters in a valid host name, dot (.) is not included in wildcard characters. For instance, when you enter *.example.com, one.example.com is counted while one.two.example.com is not counted.
The example (should...) make clear: There is no support for wildcards in IP network representations as seen below - only domain names can be used with * or ? wildcards - and a wildcard * does not make it span over multiple sub-domains.
Online Help wrote:3. IP network: Use a.b.c.d/z. a.b.c.d refers to the network and x refers to number of bits of the network mask, e.g. 192.168.0.0/24. Another valid format is a.b.c.d/network mask. In this case, a.b.c.d refers to the network and the following value refers to the network mask setting, e.g. 192.168.100.8/255.255.255.0.
This is the other config option, the old but not so lazy systems manager is using - as he has a well structured IP addressing and subnet scheme

. You can give a try and specify a host as a subnet, using the xxx.xxx.xxx.xxx/32 or xxx.xxx.xxx.xxx/255.255.255.255 syntax.
Online Help wrote:4. Network group: Represented as @group-name; group-name refers to the name of NIS network group.
This only applies to NIS infrastructure where available.
Hope there is some light now.
Regards,
-Kurt.