On Thu, 7 Dec 2017, Kevin A. McGrail wrote:
On 12/7/2017 11:47 AM, John Hardin wrote:
Is that going into the base SA rules as well?
The SA rule prop system is not conducive to how my company works. The delays
are too long to publish rules. I support it in concept but as of yet do not
have an easiest lift to support it.
I need rules in minutes not days. KAM.cf was my solution to that issue but
we release it under ASLv2.
But with the work spearheaded by Dave and the relight of ruleqa, I'm focused
on 3.4.2. Then I'm hoping we can look at publishing rules 2x per day. I do
a lot of work on my rules and can't have them kicked out of consideration
because the corpora says they aren't needed.
I was more thinking about coverage for people who aren't using KAM.cf, but
your comment about needing enough examples in the masscheck corpus to
promote and score the rule is relevant - perhaps it is important enough to
add as a base header rule, rather than through ruleqa sandboxes?
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
No representation without taxation!
-----------------------------------------------------------------------
Today: The 76th anniversary of Pearl Harbor