v0.25.0 netacl and fixes

doc/deployment.md

@@ -184,7 +184,7 @@ every key.
 - filters, rate limits, heartbeat, formatter flags and timestamp layouts
 - more than one pipeline; both chain transports, or a further hop, on one node
 - proxy mode: browser logins through a TLS-terminating proxy
-- network ACLs: not implemented in LogWisp yet
+- `acl` address rules on the listeners
 - mtls identities other than the certificate CN; `node_binding` other than
   `force`
 - creating certificates