limit_except GET {
    allow 192.168.1.0/32;
    deny all;
}