diff --git a/applications/admin/private/hosts.deny b/applications/admin/private/hosts.deny
index e69de29b..ea4e5b60 100644
--- a/applications/admin/private/hosts.deny
+++ b/applications/admin/private/hosts.deny
@@ -0,0 +1 @@
+127.0.0.1 1 1468786268
diff --git a/gluon/rewrite.py b/gluon/rewrite.py
index 40fb9adb..fc14557a 100644
--- a/gluon/rewrite.py
+++ b/gluon/rewrite.py
@@ -81,7 +81,7 @@ def _router_default():
         #  pathological backtracking from nested patterns.
         #
         file_match = r'([-+=@$%\w]|(?<=[-+=@$%\w])[./])*$', # legal static subpath
-        args_match=r'([\w@ -=]|(?<=[\w@ -=])[.])*$',         # legal arg in args
+        args_match=r'([\w@ =-]|(?<=[\w@ -])[.])*$',
     )
     return router