IP CIDR / ACL Check

Design a system to check if an IP address is ALLOWED or DENIED based on an Access Control List (ACL) defined using CIDR notation.

Background:

• CIDR notation: 192.168.1.0/24 represents a range of IP addresses
• The /24 means the first 24 bits are the network portion, remaining 8 bits are host addresses
• An ACL contains rules like ALLOW 10.0.0.0/8 or DENY 192.168.1.0/24

Part 1 - Basic CIDR Matching: Given an IP address and a list of CIDR rules, determine if the IP should be ALLOWED or DENIED.

Part 2 - Rule Priority: When multiple rules match, apply proper precedence (most specific wins, or order-based).

Part 3 - Input is CIDR (Follow-up): What if the input is a CIDR range instead of a single IP? An input CIDR should be ALLOWED only if ALL IPs in that range are allowed.

Constraints:

• IP addresses are IPv4 (four octets, 0-255 each)
• CIDR prefix length: 0-32
• 1 ≤ rules.length ≤ 10^4