use better ip detect rule