Use Case: Simple Block List

Requirement: Deny access to specific hostids

In this scenario, all users except a declared few are allowed access.

Model Definition Example

model "exampleModel" {

on hostid("user1@example.com/USER", "user2@example.com/USER") {

deny

}

on any() {

use "default"

accept

}

}

Note:The hostid is specified as a value/type pair (for example, 7200014f5df0/ETHERNET). If a hostid condition does not specify the hostid type, it is assumed that the hostid is of type string.