dont drop but reject unallowed traffic