implement rules API for host.fw
implement rules API for <vmid>.fw