adding important bugfix: only process address rules if main rules list ALLOws the connection