package styx

default permit := true

reject = 404 if {
    #some addr in net.lookup_ip_addr(input.http_request.host)
    styx.in_networks("bogons", input.http_request.host)
}

errors contains "Bogon destination not allowed" if {
    reject == 404
}