add allow rules