[options]

enable: 1

[rules]

IN ACCEPT -p tcp -dport 80 -source 1.2.3.0/24