update ss-rules

fix bug: use regular expressions verify ip