Right, but you can't* ping anything on the egress node subnet?