Examples:

Add rules:

e.g. 
* sfatables -A INCOMING --requestor-hrn ple.emaniacs.* -j ACCEPT
* sfatables -A INCOMING --requestor-hrn ple.* -j RESTRICT_NODES --include-only ple.emaniacs.pool_ple

or

Default policy:

* sfatables -P INCOMING REJECT