# allow local requests
allow 127.0.0.1;

# Sucuri WAF
allow 192.88.134.0/23;
allow 185.93.228.0/22;
allow 2a02:fe80::/29;
allow 66.248.200.0/22;
allow 208.109.0.0/22;

# deny all requests that bypass Sucuri
deny all;