added support for wildcards and x-forwarded-for in ip white/black list policies