Server: deny/allow, back link