What domains are allowed. The value has the following format:
service-list:client-list
where service-list is a blank- or comma-separated list of one or more service names or wild cards, and client-list is a blank- or comma-separated list of one or more host names or addresses, patterns or wild cards.
The following are the explicit wild cards recognized by the system:
| 
 ALL  | 
 Always matches  | 
| 
 LOCAL  | 
 Matches any host whose name does not contain a dot character.  | 
| 
 UNKNOWN  | 
 Matches any host whose name or address are unknown. Use this with care.  | 
| 
 KNOWN  | 
 Matches any host whose name and address are known. Use with care.  | 
| 
 DNSSPOOFER  | 
 Matches any host whose name does not match its address.  | 
There is one operator that can be used in the service-list and the client-list:
| 
 EXCEPT  | 
 Matches anything that matches list 1 unless it matches anything in list 2. The expected form: list1 EXCEPT list2. List1 and list2 are comma-separated.  | 
You can use patterns to distinguish clients by the network address that they can connect to. For example: service@host_pattern:client-list.
The default value comes from service.http.domainallowed in the ics.conf file.