Issue is egress gets ignored on the clients if it overlaps with a private range (we dont want to route private traffic through the gateway). 0.0.0.0 overlaps with everything so always gets ignored. If you put in the range list, those CIDR's are basically 0.0.0.0 if you exclude all private subnets