TYPE_DENY
if (type == TYPE_DENY || type == TYPE_BYPASS)
(r->flowtype == TYPE_DENY || r->flowtype == TYPE_BYPASS))
$$ = TYPE_DENY;
case TYPE_DENY:
rule->flowtype = TYPE_DENY;