/* mask: upstream blocked */