set * to allow all hosts