diff --git a/rpminspect.yaml b/rpminspect.yaml
index 17e48d1..7696d42 100644
--- a/rpminspect.yaml
+++ b/rpminspect.yaml
@@ -2,20 +2,21 @@
 badfuncs:
   # mod_proxy uses inet_ntoa (safely) for IPv4 address matching,
   # and APR interfaces for IPv6 addresses.
-  ignore:
-    - /usr/lib*/httpd/modules/mod_proxy.so
+  allowed:
+    /usr/lib*/httpd/modules/mod_proxy.so:
+      - inet_ntoa
 upstream:
   ignore:
-    - *.xml
-    - *.service
-    - *.socket
-    - *.conf
-    - *.sysconf
-    - *.tmpfiles
-    - README.*
-    - *.sysusers
-    - *.png
-    - httpd-ssl-*
+    - '*.xml'
+    - '*.service'
+    - '*.socket'
+    - '*.conf'
+    - '*.sysconf'
+    - '*.tmpfiles'
+    - 'README.*'
+    - '*.sysusers'
+    - '*.png'
+    - 'httpd-ssl-*'
     - config.layout
-    - action*.sh
-    - apachectl.*
+    - 'action*.sh'
+    - 'apachectl.*'