gistfile1.c

// Similar to the previous rule, however better detail in the reason message and quality-based disable times..
// Example reason message could be: Too much fail. Not enough successful connections. Excess PDD. Disabled for 12h.
number.count.total < 2 | break;
number.fail.percentage >= 20 | score -1, reason "Too much fail.";
number.timeout.percentage >= 20 | score -1, reason "Too many timeouts.";
number.ok.percentage < 50 | score -1, reason "Not enough successful connections.";
number.pdd.average > 8 | score -1, reason "Excess PDD.";

// Subrule syntax example - does not actually make sense as a production rule:
number.provider == 65 {
  number.ok.percentage > 50 | break;
  number.count.total > 2 {
    number.fail.percentage > 25 | score -4;
    number.pdd.average > 3 | score -4;
  } else { true | break; };
};

global.score.total == 0 | break;
global.score.total == -1 | disable 4 "Disabled for 4h.";
global.score.total == -2 | disable 6 "Disabled for 6h.";
global.score.total == -3 | disable 12 "Disabled for 12h.";
global.score.total == -4 | disable 24 "Disabled for 24h.";