ALLOW yp -> yp/server DENY .* -> yp/server