How to Configure an Access List to Only Block Specific IPs Without Applying deny all

[emerick-biron]

I am trying to use Access Lists in Nginx Proxy Manager (NPM) to create a blacklist of specific IPs, meaning I only want to deny access to certain IPs while allowing everyone else. However, I have encountered an issue due to how NPM automatically applies a deny all rule at the end of an Access List.

Problem Details:

• When I create an Access List and add only IPs to the "Deny IPs" section, NPM still blocks all traffic due to the implicit deny all that is always applied.
• If I try to bypass this by adding 0.0.0.0/0 to "Authorized IPs", NPM still applies deny all after all rules, meaning that even non-blocked IPs cannot access the service.
• Enabling "Satisfy Any" does not solve the issue because it changes the logic of the rule evaluation.

Expected Behavior:

• I want to only block certain IPs while allowing all other traffic without explicitly allowing every possible IP manually.
• The ideal behavior would be that if "Authorized IPs" is left empty, it should mean "allow all except for those listed in 'Deny IPs'."

Question:

Is there a way to configure an Access List in NPM so that it only blocks specific IPs without affecting other traffic?
If not, could this be considered as a feature request to allow Access Lists to be used only for blacklisting purposes without applying deny all?

Thank you for your help!