The encap file currently contains a bogus entry:
route addprivate 44.8.1.16/28 encap 0.0.0.0
I've asked Chris to make it impossible to enter this into the portal as it's clearly wrong. The ripsender and amprgw encapsulating daemon discard this already. - Brian