|>One thing you should definitely do with sniffer is to weight group 60 
|>lower than the others. Group 60 is the gray hosting group which will 

<snip>

|I would if I knew how..; actually I do not know what "Group 60 

<snip>

|-Nick Hayer

Easy with Declude. (Scott, correct me if I get this wrong)

You probably have sniffer set up right now as a "nonzero" test. I think
I saw 3 as the weight somewhere...

Something like this.

SNIFFER external nonzero "etc... " 3 0

To look for group 60, you set up an additional line that looks for that
specific value. If a rule in rule group 60 matches then sniffer will
return 60. So, if you wanted to back out 2/3 of sniffer's weight when
it's matching a group 60 rule, add the following line also...

SNIFGRY external 60 "etc..." -2 0

Declude is smart so it will run the test only once while evaluating the
result for each line you have - as long as the "etc..." is the same for
each line.

Hope this helps,
_M


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to