rule test1 deny wildcard
users %@% match all rules test1