new ip rules for the gateway