match MAC on start rule