Thank you Annoy
I could not use IE8 because it was so slow with lotsof sites in restriced zone.
However I notice no sites being blocked after I click inprivate filtering settings in status bar. Auto, choose or setting number of sites to 3 does not seem make difference.
Could it be b/c I set securty_hlm_only ?