allow non-classy subnets