add whitelist and http blocking