allow { ip * ; hostname * ; class clients; maxperip 2; };