allowed host security tip