moved payload handling to config
allow CIDR for IPS(not really, just last net segment), fixed signature security, take over payload handling