464xlat: add ip rule logic in the proto shell handler