only set egress rules here