This rule must be higher located then the deny rule, is it the case?