1*4d7709ddSKristof Provostextern = "{ ! 10.0.0.0/8, 10.1.2.3 }" 2*4d7709ddSKristof Provostblock out log on tun1000001 from $extern to any 3