done with checking the actions of the candidate rule with a flow table rule. Untested though