The admin shouldn't come up on aliases... but the block pages do need to perhaps come up on aliases on non-WAN interfaces. I suspect the decision to just make Untangle own all IP addresses entirely was made out of either laziness, or a desire for consistency.