puppetlabs/razor-server — pull request #261 by ChrisPortman (2014-12-11 02:02:04+00:00)
Title: (RAZOR-421) Support overriding protect_new_nodes by subnet

Adding a configuration option called 'invert_protect_new_nodes_for_subnets' that accepts a list of subnets in CIDR notation (a.a.a.a/bb) for which the 'protect_new_nodes' should be reversed. This will allow the user to set a default protection value and then override it for specific subnets.