Filter: whitelist suffixes