removed redundant rule: HTTPSB is *hard-coded* to block by default