<HTML><HEAD></HEAD>
<BODY dir=ltr>
<DIV dir=ltr>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: 'Calibri'; COLOR: #000000">
<DIV>When creating a SuffixMatchNode such as:</DIV>
<DIV> </DIV>
<DIV>BlockedDomains = newSuffixMatchNode();</DIV>
<DIV>BlockedDomains:add(newDNSName("somebaddomain.com."));</DIV>
<DIV>BlockedDomains:add(newDNSName("example.com."));</DIV>
<DIV> </DIV>
<DIV>And then a rule to match on that, for example well just use:</DIV>
<DIV>addAction(SuffixMatchNodeRule(BlockedDomains), DropAction());</DIV>
<DIV> </DIV>
<DIV>Everything behaves as expected.</DIV>
<DIV> </DIV>
<DIV>If you add/delete something to the SuffixMatchNode the rule will not match
the changes.</DIV>
<DIV>BlockedDomains:add(newDNSName("test.com."));</DIV>
<DIV> </DIV>
<DIV>You must delete the rule, and re-add it.</DIV>
<DIV>rmRule(<rule number>);</DIV>
<DIV>addAction(SuffixMatchNodeRule(BlockedDomains), DropAction());</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>Is this expected behavior?</DIV>
<DIV> </DIV>
<DIV>Also it appears we are missing “NetmaskGroupRule()” function.</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV></DIV></DIV></BODY></HTML>