# We have two options

allow 192.168.1.0/24;
deny all;

if ($remote_addr = "10.20.30.40") {return 403;}