more logging
implemented deny rules