I'm no expert, but seeing as the manual says
For example, "accept 22.214.171.124:*,reject 126.96.36.199/8:*,accept *:*" would reject any traffic destined for MIT except for web.mit.edu, and accept anything else.I don't understand what you think is lacking.
Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds