Suricata doesn't honor Pass List
It sometimes blocks the hosts defined in the selected Pass List. No matter whether you used IP subnet or Alias under Services/Suricata/Pass List, the addresses from the list get blocked.
More details at the forum post:
No data to display