After some testing and trying to understand the double /*/* I think if come up with something that 'works' in my head.
MakeDir = */CD[1-9]/* !* would indeed mean 'i wanna block MKD of anything matching this rule' Ie. MKD cd1 anywhere would match it.
Where as MakeDir = */CD[1-9]/*
/* !* would match path called */CD[1-9]/* as above and the last /* would mean INSIDE any path matching */CD[1-9]/*.
It works like this even if it doesn't make perfect sense.