correction: > If you add allow known-clients or allow unknown-clients then the inverse becomes > true (deny known-clients and deny unknown-clients respectively). the inverse would be: deny unknown-clients and deny known-clients respectively.