deny unnecessary external access