SNF is executed once for an email. Depending on the result return will trigger the appropriate test result in Declude.
-----Original Message----- From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On Behalf Of Michael Cummins Sent: Thursday, November 21, 2013 10:38 AM To: community@mailsbestfriend.com Subject: [MBF]Message Sniffer Question In the suggested global.cfg, You see this for Message Sniffer (see below) Does this mean that SNFClient.exe is executed once for every line, or is it only executed once for the enitre block? - Michael Cummins SNIFFER-TRAVEL external 047 "[PATH]\Declude\SNF\SNFClient.exe" 20 0 SNIFFER-INSURANCE external 048 "[PATH]\Declude\SNF\SNFClient.exe" 20 0 SNIFFER-AV-PUSH external 049 "[PATH]\Declude\SNF\SNFClient.exe" 20 0 SNIFFER-WAREZ external 050 "[PATH]\Declude\SNF\SNFClient.exe" 20 0 SNIFFER-SPAMWARE external 051 "[PATH]\Declude\SNF\SNFClient.exe" 20 0 SNIFFER-SNAKEOIL external 052 "[PATH]\Declude\SNF\SNFClient.exe" 20 0 SNIFFER-SCAMS external 053 "[PATH]\Declude\SNF\SNFClient.exe" 20 0 SNIFFER-PORN external 054 "[PATH]\Declude\SNF\SNFClient.exe" 20 0 SNIFFER-MALWARE external 055 "[PATH]\Declude\SNF\SNFClient.exe" 20 0 SNIFFER-ADVERTISING external 056 "[PATH]\Declude\SNF\SNFClient.exe" 20 0 SNIFFER-SCHEME external 057 "[PATH]\Declude\SNF\SNFClient.exe" 20 0 SNIFFER-CREDIT external 058 "[PATH]\Declude\SNF\SNFClient.exe" 20 0 SNIFFER-GAMBLING external 059 "[PATH]\Declude\SNF\SNFClient.exe" 20 0 SNIFFER-GENERAL external 060 "[PATH]\Declude\SNF\SNFClient.exe" 20 0 SNIFFER-SPAM external 061 "[PATH]\Declude\SNF\SNFClient.exe" 20 0 SNIFFER-OBFUSCATION external 062 "[PATH]\Declude\SNF\SNFClient.exe" 20 0 SNIFFER-IP-RULES external 063 "[PATH]\Declude\SNF\SNFClient.exe" 20 0 SNIFFER-CAUTION external 040 "[PATH]\Declude\SNF\SNFClient.exe" -10 0 SNIFFER-TRUNCATE external 020 "[PATH]\Declude\SNF\SNFClient.exe" 10 0 ############################################################# This message is sent to you because you are subscribed to the mailing list <community@mailsbestfriend.com>. To unsubscribe, E-mail to: <community-...@mailsbestfriend.com> To switch to the DIGEST mode, E-mail to <community-dig...@mailsbestfriend.com> To switch to the INDEX mode, E-mail to <community-in...@mailsbestfriend.com> Send administrative queries to <community-requ...@mailsbestfriend.com> ############################################################# This message is sent to you because you are subscribed to the mailing list <community@mailsbestfriend.com>. To unsubscribe, E-mail to: <community-...@mailsbestfriend.com> To switch to the DIGEST mode, E-mail to <community-dig...@mailsbestfriend.com> To switch to the INDEX mode, E-mail to <community-in...@mailsbestfriend.com> Send administrative queries to <community-requ...@mailsbestfriend.com>
