Service detection rules