Allow the bastion box to reach all IPs on the 10.0.x.x subnet.