POLICY=DENY
LOG_ACCEPTS=off
