whitelisting seems to be working