diff --git a/modules/binarylane/main.tf b/modules/binarylane/main.tf
index 850fa8c..36ab260 100644
--- a/modules/binarylane/main.tf
+++ b/modules/binarylane/main.tf
@@ -8,17 +8,8 @@ locals {
 
   # lab destinations reached through each region's vpn host; SMTP stays on the public internet
   lab_routes = [
-    "10.10.12.200/32",  # management ssh host
-    "198.18.199.0/32",  # git.unkin.net (rspamd rules)
-    "198.18.200.2/32",  # puppetca.k8s.syd1.au.unkin.net
-    "198.18.200.3/32",  # puppet.k8s.syd1.au.unkin.net
-    "198.18.200.4/32",  # artifactapi.k8s.syd1.au.unkin.net
-    "198.18.200.7/32",  # bind-internal resolvers
-    "198.18.25.78/32",  # vault.service.consul
-    "198.18.26.197/32", # vault.service.consul
-    "198.18.27.116/32", # vault.service.consul
-    "198.18.28.248/32", # vault.service.consul
-    "198.18.29.92/32",  # vault.service.consul
+    "198.18.0.0/16",
+    "10.10.12.200/32", # management ssh host
   ]
 
   vpcs = {