table <allownets> {}
pass out to <allownets> flags any no state