fix #551, make the service ip range private