anchor.diff:  
   If you want to allow or deny access to multiple addresses on a vhost, there are several methods you can use to match multiple addresses without having to specify each address individually.
   
  -The following table describes the methods you can use to specify multiple source and target addresses for a vhost:
  +The following table describes the methods a vhost policy can use to specify multiple source and target addresses:
   
   [cols="33,67",options="header"]
   |===
   | To... | Do this...
   
  -| Allow all users in the user group to access all source or target addresses on the vhost
  +| Allow all users in the user group to access all source or target addresses
   a| Use a `*` wildcard character.
   
   .Receive from Any Address
  
positive.code: ----
  ====
  
  | Prevent all users in the user group from accessing all source or target addresses on the vhost
  a| Do not specify a value.
  
  .Prohibit Message Transfers to All Addresses
  
negative.code: Settings for the router. A global policy defines the maximum number of incoming user connections for the router (across all messaging endpoints), and defines how the router should use vhost policies.
  
  Vhost policies::
  Connection and AMQP resource limits for a router ingress port (called an AMQP virtual host, or vhost). A vhost policy defines what a client using a particular connection can access on any messaging endpoint in the router network.
  
  The resource limits defined in global and vhost policies are applied to user connections only. The limits do not affect inter-router connections or router connections that are outbound to waypoints.
  
  Access to an AMQP resource allowed by policy for a given user connection to a given vhost is granted across the entire router network. Access restrictions are applied only at the router port to which a client is connected and only to resource requests originated by the client.
  
  == How {RouterName} Enforces Connection and Resource Limits
  
  