write an acl with sets and compare connecting peername.ip with ipHost entry (ipHostNumber)