Subnet filter