if recursion, match_clients are allowed or allow_recursion if set. if recursion false, localhost is allowed