Fix: Explicitly exclude chaosvpn ranges

Otherwise 10.0.0.0/8 includes some chaosvpn ranges