Hi,
I have been playing about with senderbase a bit and have noticed that
SB_NSP_VOLUME_SPIKE is looking for S5 to be NSP but have also noticed that
they use unknown and in the case of my provider NTL the field is blank.
I tried:
header SB_NSP_VOLUME_SPIKE eval:check_rbl_sub('sb', 'sb:S5 =~ /[^ISP]/ &&
S41 > 3.8 && S40 - S41 > 0.3')
Which works fine with NSP results, didn't try on an unknown but still
doesn't work if the field is blank, just wondering how this can be altered
to fire when the field is missing.
I have also noticed that that S25 on SB_NEW_BULK is giving out the same
number for all queries I have done, 25=1049184000, probably explains why
this rule never fires.
Martin
