1) deny (ip) IP_Block -> 0.0.0.0/0 IP_Block $VAR1 = [];