pg@danzi: use a list of hosts instead of whitelisting the whole subnet