Ha...that's what I was afraid of, Dan. Michael, thanks for the link. I'm not really a programmer, but I might be able to muddle through that. If not, I can find someone here easy enough to help. I'll check it out.
On Thursday, August 23, 2012 10:22:21 AM UTC-5, Michael Starks wrote: > > On 22.08.2012 10:56, Doc wrote: > > Drawing a blank here and not finding it in documentation...can we > > match a port range in a local rule? I'm looking to exclude messages > > where the destination port is dynamic within a specific range. > > > > Thanks, > > Doc > > As Dan noted, you can't do this with normal rules. But you should be > able to do it with a compiled rule if you know a bit of C: > http://dcid.me/2008/11/compiled-rules/ > > The examples provided should make it pretty simple. >
