limit allowed addresses