removed insecure package

remove insecure package
enable allow/deny rule