 
   robot.respond /fw (?:blacklist|b) add (url|cidr) ([^ ]+)(?: ([^ ]+)|)$/i, (msg) ->
     return unless isAuthorized robot, msg
-    return unless isSudo robot, msg
+    return unless is2fa robot, msg
 
     who = msg.envelope.user.name
 


modulename = 'fw'
blacklistfile = modulename + ".json"

isAuthorized = (robot, msg) ->
  u = msg.envelope.user

  msg.reply "Not authorized.  Missing fw role."
  return false

is2fa = (robot, msg) ->
  u = msg.envelope.user
  return true if robot.auth.is2fa(u)
  msg.reply "2fa required.  Use `auth 2fa` to validate identity."
  return false

module.exports = (robot) ->
