Function address_policy 

pub fn address_policy(policy: &Policy) -> Policy

The part of policy that decides a resolved address: its deny rules, and the allow rules’ net and fetch patterns that name an address: a pattern starting with a digit or containing :, not starting with a glob metacharacter, and made only of what an address’s text and a glob use. Anything else is left undecided (ask), which neither opens a Forbidden::Private address (named) nor refuses one (denied), so a wildcard such as * or *.example, or a name such as db.internal:5432, never reaches the local network by DNS.