write-rule working for 3 match modules