[support] Banning entire subnets