And they screw up with external networking rules as well