allow { ip *@* ; hostname *@* ; class clients; maxperip 2; };