> Anyway, is it just a proposal.  It is very flexible, but another proposal
> could easily make better sense.  It would be nice to have some properties
> with names and/or values that are more explanatory of the configured
> behavior but set the match/nomatch values to correct Filter values.

I did some quick analysis of the various combinations.  If we allow a value
to be set for matches and nomatches, that is 9 possible combinations.  Of
that 9, the ones that have the same value for match/nomatch aren't very
interesting (DENY/DENY is the equivalent of deny all).  But, interestingly,
there are only 4 combinations that make sense for filter chains because one
of the two values is set to NEUTRAL:

match value / nomatch value
     ACCEPT / NEUTRAL  (equivalent of OR with a denyall at end of chain)
       DENY / NEUTRAL  (? partial OR ?)
    NEUTRAL / ACCEPT   (? partial AND ?)
    NEUTRAL / DENY     (equivalend to AND)

the other two combinations are:

match value / nomatch value
     ACCEPT / DENY    (?accept on match?)
       DENY / ACCEPT  (?deny on match?)

So, my questions are:

1) Do you think that exposing the match/nomatch return values directly will
be too confusing?  Should we come up with "names" for the various
combinations that will help users know what they are configuring?

2) Is there another mechanism/design that could be used to better expose the
underlying feature of filters/filter chains?

-Mark


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to