fixed rules_allow()