Co-authored-by: Neil Cook <neil.cook@noware.co.uk>
:param string ip: the IP address or IPaddress port combination to match the subnet to.
:param array domains: An array of strings used to fill a :ref:`dns-suffix-match-group`.
-If this ``domains`` argument is given to this function, only queries for names matching the :ref:`dns-suffix-match-group` will use the value ``M`` to determine the outgoing ECS, other queries will use the value ``S``.
+If the optional ``domains`` argument is given to this function, only queries for names matching the :ref:`dns-suffix-match-group` will use the value ``M`` to determine the outgoing ECS; other queries will use the value ``S``.
The ACL check will be done against the mapped address ``M`` for all queries, independent of the name queried.
If the ``domains`` argument is absent, no extra condition (apart from matching the subnet) applies to determine the outgoing ECS value.