rules parsed correctly...work on comparing for firewall, then bucket