Company News Products Tools Support Documentation Q & A Contact Us

Q & A Home
Customizing SNF
Errors
False Positives
Functionality
Integration
Log Files
Resellers
Result Codes
Rulebase Updates
Software
Spam
Subscriptions
Trials
Version 3 Architecture
Documentation Home

Integration

How do I get SNF to pay attention to Hotmail's X-Originating-IP: or AOLs X-AOL-IP: or 21cns X-MAIL-SOURCE-IP:?

You can configure SNF to look for these headers using <source><header/> directives.

Most SNF systems can be configured to recognize these as follows:

<source>
      <!--<header name='X-Use-This-Source:' received='mixedsource.com [' ordinal='0' /> -->
      <!--<header name='X-Originating-IP:' received='hotmail.com [' ordinal='0' /> -->
      <header name='X-AOL-IP:'received='.aol.com ['ordinal='0'/>
      <header name='X-Originating-IP:'received='.hotmail.com ['ordinal='0'/>
      <header name='X-MAIL-SOURCE-IP:'received='21cn.com ['ordinal='0'/>
</source>

Note that if your system has inbound gateways or other message processing systems that inject Recieved: headers before SNF scans the message then you might need to change the ordinal parameter on these rules.

Since message headers can be faked, SNF uses some specific rules to identify which source header to use and under which circumstances. For example, the AOL rule above says this:

If the top (ordinal='0') Received header contains the string ".aol.com [" then look for the first header that looks like "X-AOL-IP:" and use the IP you find there as the source IP for this message.

If you have a gateway in front of your system then the aol.com Received header will probably be the second Recieved header, so you would change the ordinal parameter for the rule to ordinal='1'.

You should look at the message headers that go through your system in order to identify what will work for you.