allow local domains and users