atomic_ruleset mode 2 & 3