when you multiple conditions in a rule, only ione of the conditions needs to pass fot the rule to be considered true.
if all conditions must pas, you should create a separate rule for each condition and edit the restrict access code like the example from my previous reply.