On Mon, 21 Jul 2003, Matt Kettler wrote: > At 06:30 PM 7/21/2003 -0400, Eric Hart wrote: > > > URI rules > > > META rules > > > Use of PERL IF expressions in SA rules. > > > CF processing algorithm > > > > Matt Kettler's howto at > >http://mywebpages.comcast.net/mkettler/sa/SA-rules-howto.txt doesn't cover > >these, unfortunately. > > Correct, I do however reference these rule types and point the reader in a > general direction as to where to get information about them. [snip] > More or less.. meta rules allow you to do a variety of boolean expressions > based on combinations of rules. The boolean syntax used is similar to that > of C, and many other programing languages. > > The format of the boolean operators isn't in the manpage, but they are very > common, so the man page writer seems to have assumed that anyone writing > meta rules has a basic understanding of boolean expressions. Here's a short > intro: > > || is a boolean OR operator... so TEST1 || TEST2 reads as "true if either > TEST1 or TEST2 are true" > && is a boolean AND operator > ! is a boolean negation (NOT). > () are used to force grouping of operations, just like in ordinary algebra. > > Thus the example in the manpage: > meta META1 TEST1 && !(TEST2 || TEST3) > > Is true if TEST1 matches, and neither TEST2 nor TEST3 match.
Marvelous! Would you consider adding this to your - already excellent! - howto? Cheers, - Bill --------------------------------------------------------------------------- The best accelerator for a computer running MS Windows is FREE and called gravity. (Courtesy of Jos Hulzink <[EMAIL PROTECTED]>) -------------------------------------------------------------------------- William Stearns ([EMAIL PROTECTED]). Mason, Buildkernel, freedups, p0f, rsync-backup, ssh-keyinstall, dns-check, more at: http://www.stearns.org Linux articles at: http://www.opensourcedigest.com -------------------------------------------------------------------------- ------------------------------------------------------- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the same time. Free trial click here: http://www.vmware.com/wl/offer/345/0 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk