denying all but load balancer