[global] hosts allow = subnet.a.here subnet.b.here hosts deny = specific.machine.goes.here subnet.c.here interfaces = ip.addr.1.here/subnet.mask.1.here \ ip.addr.2.here/subnet.mask.2.here bind interfaces only = yes