added comments to default deny