title: Internet connections One horizon is reachable from the Internet This horizon may run inside a vserver Must have the --open_network option Must listen on several IPs to differentiate the targets -ip0, ip1, ... One network definition is needed in blackhole rules -network internet 0.0.0.0 0.0.0.0 -rule server1 internet ip0 80 server2 vserver1 80 -rule server1 internet ip1 80 server3 vserver2 80 Use the nameip horizon-rules.sh directive to give meaningful name to IP. The rules above become more readable -rule server1 internet clienta 80 server2 clientaweb 80 -rule server1 internet clientb 80 server3 clientbweb 80