[sniffer] Re: Question, changing from SNF4SA to Milter, using freebsd

2015-09-06 Thread Pete McNeil
On 2015-09-06 13:11, P Pruett wrote:
> So what "gotchas" do you know that I need to be aware of if I already
> have snf-server
> setup and I am going to try snf-milter?

The two are not designed to work together.

It turns out that SNFMilter has the full SNF engine in it so if you have
SNFMilter running you should also be able to use SNFClient and things
that act like SNFClient such as SNF4SA.

This is not something we test heavily though because almost nobody tries
to do this. Most folks who run SNFMilter either build their own software
to manage messages (Milter API is highly restrictive) or have SNFMilter
inject headers that are later consumed by SpamAssassin and other
ubiquitous tools so that they can customize their system easily.

If you are using SA after SNFMilter, consider simply adding rules that
recognize headers injected by SNFMilter and add appropriate weights for
SNF's results. This is a common and successful configuration which
allows you to reject some messages during SMTP with SNFMilter and then
score the remaining messages using SNF's scan results with SA and other
tools that are usually bundled with SA.

You shouldn't try to run SNFMilter and SNFServer on the same system at
the same time. If you have SNFMilter running, the SNFServer "back-end"
should already be provided in that service. (Check that XCI is on, it
should be by default). In that case running SNFServer would be redundant.

Hope this helps,

_M

-- 
Pete McNeil
Chief Scientist
ARM Research Labs, LLC
www.armresearch.com
866-770-1044 x7010
twitter/codedweller 


#
This message is sent to you because you are subscribed to
  the mailing list .
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: 
To switch to the DIGEST mode, E-mail to 
To switch to the INDEX mode, E-mail to 
Send administrative queries to  



[sniffer] Question, changing from SNF4SA to Milter, using freebsd

2015-09-06 Thread P Pruett


I have to admin I missed reading INSTALL t he first time around...
But I  have SNF4SA working on Freebsd 9.3 and it helped when I realized
I needed to setup snf-server.

Later I thought to try out snf-milter,  so I did read perhaps to quickly
/usr/local/share/doc/snf-milter/INSTALL

The steps had some similar steps that are in
 /usr/local/share/doc/snf-server/INSTALL

For some reason I thought, I could run both snf-milter and snf-server at 
the same

time.   When I "service snf-milter start"   that kills snf-server

One of the many things I  assumed was that they could both run at the 
same time...

Well that did not happen.

So I made sure I "service snf-server stop" and still snf-milter did not 
start.


At this point I will likely need to do some research to see why,
but I got snf-server restarted because it was working.

So what "gotchas" do you know that I need to be aware of if I already 
have snf-server

setup and I am going to try snf-milter?







#
This message is sent to you because you are subscribed to
 the mailing list .
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: 
To switch to the DIGEST mode, E-mail to 
To switch to the INDEX mode, E-mail to 
Send administrative queries to