deny allow rules

[Kristine Kimm]

Hello,
Perhaps this question has already been answered - I have been unable to yet
find an answer in the archives.

Is it possible to deny all .zip files but allow a .zip with a specified
name?

I tried the following in filename.rules.conf:
allow   ^test\.zip$        -       -
deny   \.zip$          -       -

But the deny always seems to be applied.  Is there a way to set an override
for an allow?

I thought order in the file might have an impact but deny always was
applied regardless of which statement came first.

Thanks in advance for assistance with this question.

-KK