Using the 0.0.0.0/24 type of expression in a listener's [Connection rules] configuration does not always give the expected results if combined with network style expressions like deny:**

Situation

Access to a listener is not granted as expected. 
If the CIDR extension is not a multiple of 8 (i.e /21)  then the rule will not match to any incoming IP address. 
If formats are mixed then results can be unpredictable as per this example 

deny:**
allow:192.168.1.0/24

Resolution

This has been identified as a product issue, which will be addressed by defect OCTCR50A415106. 
To check the status of this defect, contact Customer Support.

Read full article