I'm trying to allow only certain address ranges to connect, but the documentation seems unclear to me. I don't understand the interaction between the address, the subnet, and wildcards. For example, let's say that I want anything on 123.123.ANY.ANY to connect. Two ways of entering that seem to be:
Option 1: allow 123.123.*.* (*)
Option 2: allow * (123.123.0.0)
Are those two ways the same?
Also, if an address matches no rules, is it allowed or denied?