add 'allow from all'