Improve handling of custom rules #3679

Job	Run time
Python Bindings (ubuntu-latest)	1m 39s
ubuntu-latest x86_64 --with-local-libgcrypt cc	6m 13s
ubuntu-latest x86_64 cc	5m 15s
ubuntu-20.04 x86_64 --with-local-libgcrypt cc	4m 37s
ubuntu-20.04 x86_64 cc	4m 52s
macOS-latest x86_64 --with-local-libgcrypt cc	8m 39s
macOS-latest x86_64 cc	4m 33s
macos-11 x86_64 --with-local-libgcrypt cc	4m 29s
macos-11 x86_64 cc	4m 20s
windows-latest x86_64 --with-local-libgcrypt cc	15m 25s
windows-latest x86_64 cc	7m 48s
ubuntu-20.04 x86_64 gcc-4.9 --with-pcre2 --with-maxminddb --with-sanitizer	7m 47s
ubuntu-22.04 x86_64 gcc-13 --with-pcre2 --with-maxminddb --with-sanitizer --with-lto-and-gold-linker	9m 49s
ubuntu-20.04 x86_64 clang-7 --with-pcre2 --with-maxminddb --with-sanitizer	9m 52s
ubuntu-22.04 x86_64 clang-17 --with-pcre2 --with-maxminddb --with-sanitizer --with-lto-and-gold-linker	14m 4s
Test Utils (ubuntu-latest)	2m 43s
ubuntu-latest x86_64 cc --with-pcre2 --with-maxminddb --with-thread-sanitizer	18m 13s
ubuntu-latest x86_64 cc --with-pcre2 --with-maxminddb --with-sanitizer nBPF	8m 56s
ubuntu-22.04 x86_64 clang-17 --with-pcre2 --with-maxminddb --with-memory-sanitizer	38m 58s
macOS-latest x86_64 cc --with-pcre2 --with-maxminddb	4m 12s
macos-12 x86_64 cc --with-pcre2 --with-maxminddb	4m 12s
ubuntu-latest arm64 cc --with-pcre2 --with-maxminddb	18m 46s
ubuntu-latest armhf cc --with-pcre2 --with-maxminddb --with-sanitizer	37m 25s
ubuntu-latest s390x cc --with-pcre2 --with-maxminddb	17m 33s
	4h 20m 20s

Provide feedback