Be sure to repace 'mydomain.com' with your own. Dynamic dns works too.
The first filter (starts with .if) is a whitelist of Your domains, to allow.
The second filter (starts with .if) is a blacklist of hack requests, to ban. 
------------------------code is below this line-----------------------
[+request|no log]
{.if|{.and|
{.!=|{.header|Host.}|mydomain.com.}|
{.!=|{.header|Host.}|mydomain.com:8080.}
{.!=|{.header|Host.}|localhost:.}|
{.!=|{.header|Host.}|localhost:8080.}|
{.!=|{.header|Host.}|127.0.0.1:.}|
{.!=|{.header|Host.}|127.0.0.1:8080.}|
.}|{:{.redirect|https://www.firefox.com|no log.}:}.}
{.if|{.match|/admin/*;*wget+*;/cgi-bin/*;*%host%*;*search*url%25*;*cmd.exe*;*&cmd=*;*powershell+*;*.php;*.xml;*/.env*;*/.git/*;*/wp-content/*;*/wp-includes/*;/security.txt|%url%.}|{:{.set ini|ban-list={.no pipe|{.from table|#ini|ban-list.}%ip%#hacker|.}.}{.disconnect|%ip%.}:}.}
