Implements a hacky IP policy

This patch prevents .0, .1 and .255 from being assigned in a given
subnet. The patch should be reverted later once we have actual IP
address policies ala Melange.