On Tue, 12 Oct 2010, Gnanam wrote:
Matus, this particular point was just out of my curiosity, nothing more than that. I just wanted to understand the reason for prefixing file names with 10,20,30,etc. when it can be just actual rule names as file name like head_tests.cf, html_tests.cf, etc.
There may be reasons to apply the rules files in a particular order, esp. for setting scores (e.g. set default scores, override with masscheck-generated scores, then override the scores that masscheck does a poor job on with manually-assigned scores).
I think it's touched on in the SA wiki, read the pages of developing new rules.
-- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- It is not the place of government to make right every tragedy and woe that befalls every resident of the nation. ----------------------------------------------------------------------- 65 days until TRON Legacy
