improvements in the email NIDS rules