Priority
Collection Rules are ordered in decreasing order priority. No longest prefix match is done to determine the priority. The rule appearing first has higher priority over all the subsequent rules. Example:
-
1.1.0.0/16 INCLUDE
-
1.0.0.0/8 EXCLUDE
-
0.0.0.0/0 INCLUDE
In the earlier example, all addresses belonging to 1.0.0.0/8 subnet are excluded except subnet 1.1.0.0/16 which is included.
Another Example with changed order:
-
1.0.0.0/8 EXCLUDE
-
1.1.0.0/16 INCLUDE
-
0.0.0.0/0 INCLUDE
In the above example, all addresses belonging to 1.0.0.0/8 subnet are excluded. Rule number-2 does not get exercised here because of a higher-order rule already defined for its subnet.