APM by pass rewrite profile

When thinking about blacklists (deny everything but X) and whitelists (allow everything but X), it's almost always better to use a whitelist. Rewrite allows both configurations, so you can tell it to rewrite only your internal sites, but bypass everything else.