The thing is, as far as I remember when network units were in place, even before reboot, the system tried to apply them to any newly appeared interface, i.e. created by tinc or pptp, despite MAC filter. Anyway, now it does not, so it fixed.