# VM1 and approved ops private source CIDRs only:
# allow 10.20.0.10/32;
# allow 10.20.1.0/28;
deny all;