don't double create rules if notrack is set