Be explicit about all hosts for which the upwards routing policy does not apply to avoid generating pointless rules that send packets back on their input ports.