
On 01/10/2012 01:04 PM, Eric Blake wrote:
On 12/09/2011 08:07 AM, Stefan Berger wrote:
- +<p> +<span class="since">Since 0.9.9</span> it is possible to access We missed the release; s/0.9.9/0.9.10/
Fixed.
+ filtering rules that instantiate all combinations of rules from + different lists using the notation of +<code>$VARIABLE[@<iterator ID>]</code>. + The following rule allows a virtual machine to + receive traffic on a set of ports, which are specified in DSTPORTS, + from the set of source IP address specified in SRCIPADDRESSES. + The rule generates all combinations of elements of the variable + DSTPORT with those of SRCIPADDRESSES. I would also mention:
$VARIABLE is short-hand for $VARIABLE[@0]. When combining variables, each variable that uses the same iterator ID will be directly combined; it is the use of different iterator IDs that causes all combinations to be generated.
And maybe even mention an example:
If variable A is the list [1, 2], and variable B is the list [3, 4], then combining $A[@0] and $B[@0] produces the list [1/3, 2/4], while combining $A[@0] and $B[@1] produces the list [1/3, 1/4, 2/3, 2/4].
Overall, I like what is in this series, but I think I had enough minor findings that it would be worth posting a v2 before pushing anything.
I added a concrete example now and mention the $VARIABLE being equivalent to $VARIABLE[@0]. Thanks. Stefan