avoid IP loopholes