policy default deny
allow		*		*		*		*