finished check_rules (specifically check_ext_port)