acl: fix rules with 8-byte field size