With the nomismatch keyword, the server will not accept connects from addresses having a mismatch between DNS address and hostname. Default is to accept them. With the nounknown keyword, the server will not accept connects from addresses without a DNS record. Default is to accept them.