added new deny rules and updated config for new acl rules