Allow and block rules: scopes, matching and expiry

MxGuard's rule engine is more flexible than a simple personal whitelist. Rules are the manual override that sits alongside the AI verdict.

Four scope tiers. A rule can apply to a single recipient, to a whole domain, across your entire customer account, or globally — so an MSP can set an organisation-wide block once rather than per-user.

Three matching styles. Rules support exact matches, wildcards, and CIDR ranges for IP-based rules — so you can allow *.trusted-supplier.com or block a whole /24.

Hit tracking. Every rule carries a hit counter and a last-hit timestamp, so you can see which rules are actually doing work and prune the ones that never fire.

Optional expiry. Rules can be given an expiry date — handy for a temporary allow while a partner sorts out their SPF, without leaving a permanent hole.

All rule changes are captured in the audit log.