updated ip rules for ic-vpn