Access Control

When a scope is in deny mode, only whitelist (explicit + implicit) is accepted. Private/loopback IPs are ALWAYS allowed regardless. Implicit whitelist auto-protects your own trunks & PublicBaseUrl.

Wildcards: * = any chars, ? = one char (case-insensitive). CIDR a.b.* is normalised to a.b.0.0/16 on save.

Uses your current UNSAVED rules. Save first to test the live bridge view.