Hi Gilles <snip>
> We have faced a similar issue with filters and my thoughts are that we need a > listen on socket of some kind, similar to your listen on local. > > This has several benefits over "listen on local", both in ambiguity and it > new ways the ruleset can match sessions. > > If you're interested to work on it, I'd be happy to discuss this with you > so you can come up with a diff :-) I would definitely be interested. Could you elaborate a bit on "listen on socket" method? Thank you! --peter
