A half-open validity window [from, to) in unix seconds
On a Policy, evaluation outside the window denies every
transaction. On a Rule, the rule is skipped entirely outside its
window — neither allow nor deny — so an expired deny rule stops denying.
Absent means always in force.
A half-open validity window
[from, to)in unix secondsOn a Policy, evaluation outside the window denies every transaction. On a Rule, the rule is skipped entirely outside its window — neither allow nor deny — so an expired
denyrule stops denying. Absent means always in force.