fixed hardcoded allow-transfer IP