refactor WallFilter, change permit > deny