match rule set should match true if no sub-rules defined
faster wildcard matching for * masks