How do I set up white rules in Message Sniffer?
If you would like white rules added to your rulebase then please send a list to support@armresearch.com and Arm Research will add them for you. Keep in mind that Arm will be coding for a pattern match in the headers and body of the message. It is not usually wise to whitelist your domains since spammers frequently forge from addresses from the domain where they are targeting their spam in order to exploit these kinds of rules. If you would like your system to ignore certain domains, Arm recommends setting up your GBUdbIgnoreList.txt.
Arm will work with you to develop a good strategy. If you need to develop an extensive rulebase then Arm can contract with you for that work. Support included with the subscription is intended to cover adjustments for specific false positives or specific spam issues not covered by the core rulebase.