Hello guys: I got it working. I used it on the LAN interface going to the IP address of the server. I did have /24 used. There is no CIDR number of 32 on the choice list, so I guess I should use "single host or alias".