ORF 4.4 Trial: not work with external agents? - ORF Forums

@Dmitiy: the External Agent feature is fully functional in the trial version, I guess the problem is that you send using the powershell script. Please note that ORF ignores email sent from intranet IPs (including the localhost address 127.0.0.1) by default, though if the problem is caused by that, you should still see an On Arrival entry in the log, and the email should go through unchecked. I recommend trying this method:

http://blog.vamsoft.com/2009/08/14/tales-from-tech-support-part-4-testing-our-external-agent/

and keep monitoring the logs using the Log Viewer Tool:

http://blog.vamsoft.com/2010/04/21/using-the-orf-log-viewer/

@Dmitriy: This is because two whitelists always take precedence over any of the blacklists (even when excepted) - the IP Whitelist and the Authenticated User Whitelist. A subrule of the IP Whitelist is responsible for whitelisting emails originated from the intranet, hence the whitelisting.

The logic behind this is quite complex, but the main reason is that ORF does not really have a concept of "inbound" and "outbound" emails ("inbound" emails would be those sent from an external sender to a local user and "outbound" are those sent from a local user to an external recipient). Differentiating between the two types of email is crucial, because most can may be applied to inbound emails only, like Recipient Validation, SPF check, and so on.

The strategy most frequently employed by spam filters to idenfity inbound/outbound difference is to request the administrator to maintain a list of local domains in the spam filter configuration. This allows the spam filter to check if the recipient is local or external, but it also comes at a maintenance cost. I can tell if I were to add a new domain one year after I set up my spam filter, it would hardly occur to me I need to update the spam filter configuration.

So instead of the above, ORF chooses a different path when it says "Hey, if the email originates from the intranet or it is coming from the outside, but from an authenticated user, it is surely trusted, right?". This also conveniently overlaps with the definition of "outbound emails" 99% of the time. The price to pay is that emails from the intranet are always whitelisted, even when you want to perform tests.