Fix snort rules