fix #9, #23, #25

add sniff to ruleset.xml, union three fixes in one branch