adding deny-tnt filters