fix passthrough and subnet conflict