Rlogin-Gw: Rlogin Proxy
The first “permit-hosts” says the inside network is OK to use the proxy and that users may change passwords from there as it is a trusted network
The second “permit-hosts” says any other host is OK to use the proxy if they authenticate first