On Thu, 7 Dec 2017, Kevin A. McGrail wrote:
On 12/7/2017 4:20 PM, John Hardin wrote:
I was more thinking about coverage for people who aren't using KAM.cf, but
your comment about needing enough examples in the masscheck corpus to
promote and score the rule is relevant - perhaps it is important enough to
add as a base header rule, rather than through ruleqa sandboxes?
I'm guess I don't really know how. What is your definition of a base header
rule and what mechanism would you use to publish it as a base rule?
I was thinking of a rule in rules/20_head_test.cf with a fixed score, vs.
one in something like rulesrc/sandbox/jhardin/20_mumble.cf
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
At $8 billion per year, the TSA is the most expensive
theatrical production in history. -- David Burge @iowahawkblog
-----------------------------------------------------------------------
Today: The 76th anniversary of Pearl Harbor
