RequestPolicy rules combine 3 items:

Note: When both an allow and a block rule match a request, the user's default rule is used. (A priority system between rules is considered in issue 491)

Origin and Destination

The origin and destination components of a rule can have the following properties. All properties are optional. An empty rule property will not be considered when matching against requests.