same as in constructor of Ip4SubnetFilterRule