When first visiting answers.microsoft.com you're getting redirected to login.live.com, and back. See RequestPolicyContinued/requestpolicy#756 (comment). @nodiscc isn't this a candidate for allow_sameorg? Which checks did you do before adding a rule to the list?