diff --git a/doc/ffserver.conf b/doc/ffserver.conf
index 0a1f039d66..3e03958591 100644
--- a/doc/ffserver.conf
+++ b/doc/ffserver.conf
@@ -54,6 +54,9 @@ FileMaxSize 200K
 # Specify launch in order to start ffmpeg automatically
 # Launch
 
+# Only allow connections from localhost to the feed
+ACL allow 127.0.0.1
+
 </Feed>
 
 ##################################################################
@@ -134,6 +137,19 @@ VideoGopSize 12
 # for a key frame to appear in the data stream.
 #PreRoll 15
 
+# ACL:
+
+# You can allow ranges of addresses (or single addresses)
+# ACL ALLOW <first address> <last address>
+
+# You can deny ranges of addresses (or single addresses)
+# ACL DENY <first address> <last address>
+
+# You can repeat the ACL allow/deny as often as you like. It is on a per stream basis. The first
+# match defines the action. If there are no matches, then the default is the inverse of the last
+# ACL statement. Thus 'ACL allow localhost' only allows access from localhost. 
+# 'ACL deny 1.0.0.0 1.255.255.255' would deny the whole of network 1 and allow everybody else.
+
 </Stream>
 
 # second mpeg stream with high frame rate
@@ -331,6 +347,11 @@ StartSendOnKey
 
 Format status
 
+# Only allow local people to get to the status
+
+ACL allow localhost
+ACL allow 192.168.0.0 192.168.255.255
+
 FaviconURL http://pond1.gladstonefamily.net:8080/favicon.ico
 
 </Stream>