dotted-quad and ethernet mac address support in rules (parser changes)