added rules to match https hosts