Sometimes there is a requirement to create an exception for Deny rule. You can use an «Allow rule» for this purpose. Regardless the sort-order in the web-interface, allow rules are applied before deny rules.

If you need to allow access of a particular user to site or host even is quota is exceeded or user is disabled - use «Allow rule» with «allow even if user is disabled» option.

Deny and Allow rules are applied in the following order (from top to bottom):

1. Profile assigned to root group
2. Allow rules for root group
3. Deny rules for root group
4. …
5. Profiles assigned to parent group
6. Allow rules of parent group
7. Deny rules of parent group
8. Profiles assigned to a user
9. User Allow Rules
10. User Deny rules

You can specify a range of ports using «-» as well as list of ports using comma - «,» or space-bar -« ».

Example: 21,22,1100-1200.