allow 192.168.10.0/24;
deny all;