deny rules bug fixed