I just checked inside the Ewall folders and found one named TEMP where I found tens of thousands of files with the .xhdr extension. What are these files?
The .xhdr files are created by SNF and can be turned off in SNF’s .cfg file. They contain text that could be added to the headers of the message to help debug false positives and/or to trigger other filtering systems. (For example, in many postfix installations, a very simple script scans the message with SNF and then adds the .xhdr information to the message. Filtering then occurs later when the result codes in the .xhdr information are detected.) Normally these would be created in SNFs working directory, I’m not sure why they would be anywhere else. You can safely delete any .xhdr files that are left over. In the .cfg file to turn off the .
