Since you put this into complain mode, there may be more entries needed that might have been logged with ALLOWED -- can you grep for those, too, please?
Since you put this into complain mode, there may be more entries needed that might have been logged with ALLOWED -- can you grep for those, too, please?