dont allow ip-only subnets, update seeds