rule for testing

[Benny Pedersen]

header HELO_WIERD_FORMAT ALL =~ /\?\d+\.\d+\.\d+\.\d+\?/
describe HELO_WIERD_FORMAT Helo with ? around nummeric ip
score HELO_WIERD_FORMAT 1.5

-- 
http://localhost/ 100% uptime and 100% mirrored :)