-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Loren Wilton writes: > There are a lot of things I'd like to see done with rules to make rule > writing both easier and more productive, and I;ve been trying to come up > with a structure that conveniently supports all the things I'd like to see. > A few of the more obvious: > > 1. User rules handled efficiently > 2. Counting rules > 3. Chained re's > 4. A simple algorithmic form of rule so you don't have to write an eval or > plugin to do something simple > 5. Reloading the rule base without having to restart SA > 6. Rules with scores based on number of hits (variation on counting rules) > 7. Short circuiting. fwiw, #2 is achieveable now as a plugin; #4, writing a plugin for an eval rule is _much_ simpler than you think!; #7 is something that will be possible with something on Daniel's wish list for 3.2.0 (a pluginized PerMsgStatus::check() method). the real issue is really time to work out all these implementations, and someone willing to devote time to it. - --j. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Exmh CVS iD8DBQFC5HatMJF5cimLx9ARAsEsAKCmqzc38BFCTsPlZUcd8GW4d/632QCeJctl 8831sGjyxI0hNvimg/4byPQ= =aAuN -----END PGP SIGNATURE-----
