Is it possible to have a base exit poilicy of "reject *.*" (middle man) but at the same time allow specific IP addresses to use my server as exit or entry points?