Example: Allow subnet with exception

You can use a configuration similar to the following example to allow entire subnet, for example, 1x.x.0.0/16 except an IP 1x.x.1.100/32. The block rule for the specific IP is placed first (higher priority) before the allow rule for the broader subnet.

{
  "denyAll": true,
  "enabled": true,
  "rules": [
    {
      "target": "1x.x.1.100/32",
      "block": true
    },
    {
      "target": "1x.x.0.0/16",
      "block": false
    }
  ]
}