# Fail-closed active file. Replace atomically from the reviewed .template file. allow 192.168.0.1; deny all;