improve WallFilter, support minusAllow