In fact, the mapping file so far is only doing what Castor does by default.

How could you be expected to guess what that tiny metal box does by looking at it?

First, lots of things that Snort does by default in restricted directories, it can do by request to non-protected directories.