madscientist
/
PKG-SNF4CGP-NIX

<HTML>
<HEAD>
  <TITLE>CommuniGate Pro: ARM Research Labs Sniffer Antispam Plugin</TITLE>
  <link rel="stylesheet" href="GuideStyle.css" type="text/css" />
  <link rel="stylesheet" href="AdminStyle.css" type="text/css" />

</HEAD>
<BODY BGCOLOR=white>

<TABLE border=0 cellPadding=0 cellSpacing=0 width="100%">
  
<td><img src="CGPLogo.gif" alt="CommuniGate Pro" /></td>
<tr><td class="tabBodyOuter">
<table width="100%" cellspacing="0" cellpadding="0" class="tabBody"><tr><td>
		<h1>ARM Research Labs Sniffer Plugin for CommuniGate Pro</h1>
		<div class="guideTOC"><ul>

<TABLE width="100%" cellspacing="0" cellpadding="0" class="tabBody" >


  <LI><A href="#Download">Download the Sniffer Plugin</A> 
  <LI><A href="#Install">Installation</A> 
  <UL>
    <LI><A href="#WIN32">Installing on a MS Windows 200x/NT/XP/9x System</A> 
    <LI><A href="#Linux">Installing on a Linux System</A>
    <LI><A href="#FreeBSD">Installing on a FreeBSD or OpenBSD System</A> 
  </UL>
  <LI><A href="#Upgrading">Upgrading to a newer version</A>
  <LI><A href="#Conf">Configuring the Sniffer Plugin</A>
  <LI><A href="#Config">Configuring the Sniffer Plugin</A>
  <LI><A href="#Test">Testing the Sniffer Plugin</A>
  <LI><A href="#Options">Command line options</A>
  <LI><A href="#Integrate">Integrating the Sniffer Plugin with CommuniGate Pro</A>
  <LI><A href="#Update">Updating the spam definitions database</A>

</ul></div>
</TD></TR></TABLE>

</table>
</TABLE>


<P><B>Note:</B> The ARM Research Labs Sniffer Plugin is available only
for <I>some</I> platforms supported with the CommuniGate Pro server
software. Before you order the Sniffer Plugin License, make sure that
the available versions of the Sniffer Plugin software run on your
CommuniGate Pro Server platform.

<P><B>Note:</B> The ARM Research Labs Sniffer Plugin requires
CommuniGatePro version 5.2.3 or later.


<H2><HR><A NAME="Download"></A>Download the ARM Research Labs Sniffer Plugins</H2>
<DL><DD>
  <P>ARM Research Labs Sniffer antispam plugins are available for certain platforms only.

  <TABLE class="guideTable" BORDER=1 CELLSPACING=0 CELLPADDING=1>
    <TR BGCOLOR="#cccccc">
       <TH NOWRAP rowspan=2 width=50%>Operating System</TH>
       <TH NOWRAP rowspan=2>CPU</TH>
       <TH NOWRAP colspan=2>Download</TH>
    </TR>

    <TR BGCOLOR="#cccccc">
       <TH NOWRAP>via<BR>http</TH>
       <TH NOWRAP>via<BR>ftp</TH>
    </TR>

    <TR>
       <TD ALIGN=CENTER>Microsoft Windows NT/2000/XP<BR>Microsoft Windows 95/98</TD>
       <TD ALIGN=CENTER>x86</TD>
       <TD ALIGN=CENTER><A HREF="http://www.armresearch.com/pub/plugins/CGPSNF-Win32-Intel.zip">
	   <IMG SRC="DownLoad.gif" BORDER=0 WIDTH=16 HEIGHT=16></A></TD>
       <TD ALIGN=CENTER><A HREF="ftp://ftp.armresearch.com/pub/plugins/CGPSNF-Win32-Intel.zip">
	   <IMG SRC="DownLoad.gif" BORDER=0 WIDTH=16 HEIGHT=16></A></TD>
    </TR>

    <TR>
       <TD ALIGN=CENTER>Linux<BR>Kernel 2.6 (stdc++ library version = 6.0)</TD>
       <TD ALIGN=CENTER>x86</TD>
       <TD ALIGN=CENTER><A HREF="http://www.armresearch.com/pub/plugins/CGPSNF-Linux-Intel.tar.gz">
	   <IMG SRC="DownLoad.gif" BORDER=0 WIDTH=16 HEIGHT=16></A></TD>
       <TD ALIGN=CENTER><A HREF="ftp://ftp.armresearch.com/pub/plugins/CGPSNF-Linux-Intel.tar.gz">
	   <IMG SRC="DownLoad.gif" BORDER=0 WIDTH=16 HEIGHT=16></A></TD>
    </TR>

    <TR>
       <TD ALIGN=CENTER>FreeBSD 7.x</TD>
       <TD ALIGN=CENTER>x86</TD>
       <TD ALIGN=CENTER><A HREF="http://www.armresearch.com/pub/plugins/CGPSNF-FreeBSD7-Intel.tar.gz">
	   <IMG SRC="DownLoad.gif" BORDER=0 WIDTH=16 HEIGHT=16></A></TD>
       <TD ALIGN=CENTER><A HREF="ftp://ftp.armresearch.com/pub/plugins/CGPSNF-FreeBSD7-Intel.tar.gz">
	   <IMG SRC="DownLoad.gif" BORDER=0 WIDTH=16 HEIGHT=16></A></TD>
    </TR>

    <TR>
       <TD ALIGN=CENTER>OpenBSD 4.3</TD>
       <TD ALIGN=CENTER>x86</TD>
       <TD ALIGN=CENTER><A HREF="http://www.armresearch.com/pub/plugins/CGPSNF-OpenBSD4.3-Intel.tar.gz">
	   <IMG SRC="DownLoad.gif" BORDER=0 WIDTH=16 HEIGHT=16></A></TD>
       <TD ALIGN=CENTER><A HREF="ftp://ftp.armresearch.com/pub/plugins/CGPSNF-OpenBSD4.3-Intel.tar.gz">
	   <IMG SRC="DownLoad.gif" BORDER=0 WIDTH=16 HEIGHT=16></A></TD>
   </TR>

  </TABLE>

</DL>

<P>The current version of the Plugin is 0.1.0.
<P>The current version of the ARM Research Labs Sniffer Engine is 3.0.11.


<H3><HR><A name=Upgrading></A>Upgrading to a newer version.</H3>
<P>When upgrading the Plugin to a newer version, do the following steps:
<UL>
   <LI>Stop the current copy of the plugin application via CommuniGate Pro WebAdmin interface.
   <LI>Install and configure the new version of the Plugin as described above in this document.
</UL>

<H3><HR><A name="WIN32"></A>Installing on a MS Windows 200x/NT/XP/9x System.</H3>
<UL>
    <LI>Open the command-line interface window and 
	change the current directory to the CommuniGate Pro <I>base directory</I>.
    <LI>Use any &quot;unzip&quot;-type tool to unpack the 
     <TT>CGPSNF-Win32-Intel.zip</TT> file. The <TT>CGPSNF</TT> directory will be created inside the <I>base directory</I>. 
    <LI>Proceed with <A HREF="#Config">Configuring the Sniffer Plugin</A>.
</UL>

<H3><HR><A name=Linux></A>Installing on a Linux System.</H3>
<UL>
    <LI>Log in as a super-user (root).
    <LI>Change the current directory to the CommuniGate Pro <I>base directory</I>.
    <LI>Unpack the Plugin archive with the <TT>gtar</TT> command (or 
    with the <TT>gunzip</TT> and <TT>tar</TT> commands):<TT><BR>
        &nbsp;&nbsp;gunzip CGPSNF-FreeBSD-Intel.tar.gz<BR>
        &nbsp;&nbsp;tar -xf CGPSNF-FreeBSD-Intel.tar</TT><BR>
        The <TT>CGPSNF</TT> directory will be created inside the <I>base directory</I>. 
    <LI>Proceed with <A HREF="#Config">Configuring the Sniffer Plugin</A>.
</UL>

<H3><HR><A name=FreeBSD></A>Installing on a FreeBSD or OpenBSD System.</H3>
<UL>
    <LI>Log in as a super-user (root).
    <LI>Change the current directory to the CommuniGate Pro <I>base directory</I>.
    <LI>Unpack the Plugin archive with the <TT>gtar</TT> command (or 
    with the <TT>gunzip</TT> and <TT>tar</TT> commands):<TT><BR>
        &nbsp;&nbsp;gunzip CGPSNF-FreeBSD-Intel.tar.gz<BR>
        &nbsp;&nbsp;tar -xf CGPSNF-FreeBSD-Intel.tar</TT><BR>
        The <TT>CGPSNF</TT> directory will be created inside the <I>base directory</I>. 
    <LI>Proceed with <A HREF="#Config">Configuring the Sniffer Plugin</A>.
</UL>

<H3><HR><A name=Config></A>Configuring the Sniffer Plugin.</H3>

<P>In the module directory (<TT>/var/CommuniGate/CGPSNF</TT> on a
  Linux or Linux-like system):
<UL>
    <LI>Copy the configuration file <TT><BR>
      &nbsp;&nbsp;snf_engine.xml.sample</TT><BR> to <TT><BR>
      &nbsp;&nbsp;snf_engine.xml</TT><BR> and customize as
      needed.  Please see the <A href="http://www.armresearch.com">ARM
      Research Labs web site</A> for documentation on
      the <TT>snf_engine.xml</TT> configuration file.<BR>

    <LI>Copy <TT><BR>
      &nbsp;&nbsp;identity.xml.sample</TT><BR> to <TT><BR>
      &nbsp;&nbsp;identity.xml</TT><BR> and edit to include the
      license ID and authentication attributes of
      the <TT>&lt;identity&gt; element</TT>.<BR>

    <LI>Copy <TT><BR>
      &nbsp;&nbsp;getRulebase.sample</TT><BR> to <TT><BR>
      &nbsp;&nbsp;getRulebase.xml</TT><BR> and edit to include the
      license ID and authentication:

      <UL>
	<LI>Change the line <TT><BR>
	    &nbsp;&nbsp;AUTHENTICATION=authenticationxx</TT><BR>
	    to <TT><BR>
	    &nbsp;&nbsp;AUTHENTICATION=YOUR_AUTHENTICATION</TT><BR>
	    where <TT>YOUR_AUTHENTICATION</TT> is authentication code
	    obtained from ARM Research Labs.</LI>

	<LI>Change the line <TT><BR>
	    &nbsp;&nbsp;LICENSE_ID=licenseid</TT><BR> to <TT><BR>
	    &nbsp;&nbsp;LICENSE_ID=YOUR_LICENSE_ID</TT><BR>
	    where <TT>YOUR_LICENSE_ID</TT> is license ID obtained from
	    ARM Research Labs.</LI>

      </UL>
<BR>

    <LI>Copy <TT><BR>
      &nbsp;&nbsp;GBUdbIgnoreList.sample</TT><BR> to <TT><BR>
      &nbsp;&nbsp;GBUdbIgnoreList</TT><BR> and customize as
      needed.  Please see the
      <A href="http://www.armresearch.com">ARM Research Labs web
      site</A> for documentation on the <TT>GBUdbIgnoreList</TT>
      file.<BR>

    <LI>Download the Sniffer database:
      <UL>
	<LI>Create the file <TT>UpdateReady.txt</TT> in the plugin directory:<TT><BR>
	    &nbsp;&nbsp;touch UpdateReady.txt</TT><BR>
	</LI>
	<LI>Run the <TT>getRulebase</TT> script in the plugin
	  directory:<TT><BR>
	    &nbsp;&nbsp;getRulebase</TT><BR>
	  This downloads the Sniffer database to the plugin directory.
      </UL>

      The <B><TT>CGPSNF</TT></B> program automatically updates the
      Sniffer database as needed.

    <LI>Proceed with <A HREF="#Test">Testing the Sniffer Plugin</A>.
</UL>


<H3><HR><A name=Test></A>Testing the Sniffer Plugin.</H3>
<P>On Windows System:
<!--
<UL>
    <LI>Launch the <TT>CGPSNF.exe</TT> application by typing:<TT><BR>
      &nbsp;&nbsp;CGPSNF\CGPSNF.exe CGPSNF\snf_engine.xml</TT><BR>
      It will report the Plugin version number and build date.<BR>

    <LI>Type:<TT><BR>
       &nbsp;&nbsp;1 FILE CGPSNF\junkmsg.msg</TT><BR>
       The plugin should report that the file is spam.
    <LI>Quit <TT>CGPSNF.exe</TT> by typing Ctrl-Z.  
</UL>
-->

<P>On a Unix System:
  <UL>
    <LI> Change to the module directory:<TT><BR>
	&nbsp;&nbsp;cd /var/CommuniGate/CGPSNF</TT><BR>

    <LI>Launch the <TT>CGPSNF</TT> application by typing:<TT><BR>
      &nbsp;&nbsp;./CGPSNF snf_engine.xml</TT><BR>
      It will report the Plugin version number and build date.<BR>

    <LI>Type:<TT><BR>
       &nbsp;&nbsp;1 FILE junkmsg.txt</TT><BR>
       the plugin should report that the file is spam.

    <LI>Quit <TT>CGPSNF</TT> by typing Ctrl-D.  
</UL>

<H3><HR><A NAME="Options"></A>Command Line Options</H3>
<DL><DD>
  The Sniffer Plugin supports the following command-line option (parameters):<DL>
  <P><DT><TT>snf_engine.xml</TT>
  <DD>This option tells the Plugin to read the <TT>snf_engine.xml</TT>
    configuration file.

</DL>
</DL>


<H3><HR><A name=Integrate></A>Integrating the Sniffer Plugin with CommuniGate Pro.</H3>

Please check the <A
HREF="http://www.communigate.com/CommuniGatePro/VirusScan.html#Launch">External
Filters</A> section of the CommuniGate Pro manual. 

<P>Open the General page in the Settings section of the WebAdmin Interface and click the Helpers link.
Create the Helper as follows:


<center class="WebAdmin"><form action="Null.html">
<TABLE  class="settingsBox" cellpadding="3" width="90%">
  <caption>Content Filtering</caption>

<TR><TD BGCOLOR="#EEEEEE">
<TABLE class="settingsBox" WIDTH="100%" BORDER="0" CELLSPACING=1 CELLPADDING=0>
 <TR>
  <td align="right"><select name="U3"><option value="0">Disabled</option><option value="1" selected="selected">Enabled</option></select></td>
  <td><input name="N3" value="ARM Sniffer" size="15" maxlength="200" type="text" /></td>
  <TD colspan=2 ALIGN=center></TD>
 </TR><TR>
  <td align="right" width="25%">Log Level:</td><td><select name="L3"><option value="0">Crashes Only</option><option value="1">Failures</option><option value="2">Major &amp; Failures</option><option value="3">Problems</option><option value="4" selected="selected">Low Level</option><option value="5">All Info</option></select></td>
  <td align="right" width="25%">Program Path:</td><td><input name="P3"
    value="CGPSNF/CGPSNF /var/CommuniGate/CGPSNF/snf_engine.xml" size="30" maxlength="255" type="text" /></td>

 </TR><TR>
  <TD ALIGN=RIGHT>Time-out:</TD><TD><SELECT NAME="T0"><OPTION VALUE=0>disabled<OPTION VALUE="15">15 seconds<OPTION VALUE="30">30 seconds<OPTION VALUE="60">minute<OPTION VALUE="120">2 minutes<OPTION VALUE="180">3 minutes<OPTION VALUE="300" SELECTED>5 minutes<OPTION VALUE="600">10 minutes<OPTION VALUE="900">15 minutes<OPTION VALUE="1800">30 minutes<OPTION VALUE="3600">hour</SELECT></TD>
  <TD ALIGN=RIGHT>Auto-Restart:</TD><TD><SELECT NAME="A0"><OPTION VALUE=0>disabled<OPTION VALUE="5">5 seconds<OPTION VALUE="7">7 seconds<OPTION VALUE="10">10 seconds<OPTION VALUE="15">15 seconds<OPTION VALUE="30">30 seconds<OPTION VALUE="60" SELECTED>minute<OPTION VALUE="120">2 minutes<OPTION VALUE="180">3 minutes<OPTION VALUE="300">5 minutes<OPTION VALUE="600">10 minutes<OPTION VALUE="900">15 minutes<OPTION VALUE="1800">30 minutes<OPTION VALUE="3600">hour<OPTION VALUE="7200">2 hours<OPTION VALUE="10800">3 hours<OPTION VALUE="21600">6 hours</SELECT></TD>
 </TR>
</TABLE></TD></TR>
</TABLE></FORM></center>


<B>Note:</B> For Windows system the Program Path shold be
<TT>CGPSNF\CGPSNF.exe CGPSNF\snf_engine.xml</TT><BR>
<B>Note:</B> On some versions of FreeBSD system you may need to
specify the full path to the program,
i.e. <tt>/var/CommuniGate/CGPSNF/CGPSNF /var/CommuniGate/CGPSNF/snf_engine.xml</tt>

<P>The recommended Scanning Rule is as follows:</P>

<center class="WebAdmin"><form action="Null.html">
<TABLE class="settingsBox" cellpadding="3" width="90%">
        <tr align="left">
	   <th>Data</th>
	   <th>Operation</th>
	   <th>Parameter</th>
	</tr>
<TR>
 <TD>
  <SELECT NAME="c2"><OPTION VALUE="0" SELECTED>---<OPTION VALUE="12">Message Size</SELECT>
 </TD><TD>
  <SELECT NAME="o2"><OPTION VALUE="0" SELECTED>is<OPTION VALUE="4">greater than</SELECT>
 </TD><TD>
  <INPUT TYPE="text" NAME="p2" VALUE="" SIZE="20" MAXLENGTH="1024">
 </TD>
</TR>

<tr align="left">
	   <th>Action</th>
	   <th colspan="2">Parameter</th>
	</tr>
<TR VALIGN=TOP>
 <TD><SELECT NAME="a0"><OPTION VALUE="0">---<OPTION VALUE="6">Stop Processing<OPTION VALUE="17" SELECTED>ExternalFilter</SELECT>
 </TD><TD><TEXTAREA NAME="r0" ROWS="4" COLS="40">ARM Sniffer</TEXTAREA>
 </TD>
</TR>
<TR VALIGN=TOP>
 <TD><SELECT NAME="a1"><OPTION VALUE="0" SELECTED>---<OPTION VALUE="7">Stop Processing</SELECT></TD>
 <TD colspan="2"><TEXTAREA NAME="r1" ROWS="4" COLS="40"></TEXTAREA></TD>
</TR>

</TABLE></FORM></center>

<hr/><div align="right" class="guideCopyright">CommuniGate&reg; Pro Guide. Copyright &copy; 1998-2009, Stalker Software, Inc.</div>

</BODY>
</HTML>