Never allow non-resolving-to-ASN IPs