Theo Van Dinter writes: > On Tue, Jan 16, 2007 at 06:23:48PM -0700, Kelly Jones wrote: > > If I want to block subjects matching "foo" or "bar", is it more > > efficient to write two regexps or a single "foo|bar" regexp? > > It'll be more efficient to do a single regexp. > > > Or are there multiple rules because the scores are different and have > > to be optimized differently? > > Yes. Rules have different hit rates, so they need to get different > scores because it's better for overall efficacy.
Also, a single regexp matches only once. We want to know not only that *one* of our rules matched, but also *which* rules, and in what combination. --j.
