update ss-rules

improve the efficiency of the use of iptables-restore
use complete ignore list