Add anti-spoofing rule with check for the whitelist