# allow local subnet to access socks proxy
192.168.1.0/24 any -