internal simplification of filters
multiple allow rules