update ss-rules

use regular expressions verify ip