allow link-local only