220.127.116.11. Access Control
Option fields also allow administrators to explicitly allow or deny hosts in a single rule by adding the
denydirective as the final option.
For instance, the following two rules allow SSH connections from
client-1.example.com, but deny connections from
sshd : client-1.example.com : allow sshd : client-2.example.com : deny
By allowing access control on a per-rule basis, the option field allows administrators to consolidate all access rules into a single file: either
hosts.deny. Some consider this an easier way of organizing access rules.