non iptables
hosts.deny hosts.allow only