level 1 { deny 94.232.45.12; deny 94.232.40.0/21; deny 172.202.246.146; }