The webserver delivers content which is supposed to be denied by the filter rules.
The dispatcher rejects the request, but the webserver has the resource in its cache, thus the content gets delivered by the webserver. This can happen if the filter rules of the dispatcher had been modified, but the cache was not cleared.
Always clear the dispatcher's cache after modifying the filter rules of the dispatcher.
All dispatcher versions