changed deny to drop