At the moment, we have no support for IP based rules and depending on where they show up in the p4 protects, the rule may get applied or ignored.

There is existing discussion in this Google doc that documents the problem and is a step towards converging to a solution.

/cc @sourcegraph/source/iam