add rules & fix start-end comb valid.
add wa for allowed hosts (we do not use DNS)
add lazy date support