[Element] allow-from [Child of] policy [Required] Yes [Allow Multiple] No [Description] 
Defines all the domains that are affected by this policy. Defines the sites that are allowed to access resources in a certain policy. By using the allow-from element for a particular policy, you implicitly deny access for all non-listed domains. If allow-from is empty, then the policy file grants access to no sites.