prevent scanning the network and broadcast addresses of a CIDR