Problem

Under Relay Policies -> Internal or External, if both domain and a host/IP/CIDR apply on particular incoming connection, which takes precedence?

Resolution

The precedence order is as follows:

IP address -> Host -> CIDR.