add whitelisting to utmz

fix the to_sym ddos vulnerability