try again; can't block subnet 0 with internal "network" route