The dbfwfilter doesn't parse prepared statements for all rules which requires that they are disabled.