should the private ip also be added to allowed ips...