write rule working

string match module to be worked upon