Spam from Doc Cayden Matthews <> RSS


I get a lot of spam there the (Outlook) email header contain
Doc Cayden Matthews
"Doc" is common for all the spam, other details are all the time different.
How can I stop this ?

by BJORN CARLSSON 6 years ago

(Assuming "doc" is in the From: line)

1. Start the Administration Tool.
2. Navigate to the Configuration / Tests / Tests page and make sure the Keyword Blacklist test is enabled
3. Navigate to the Configuration / Filtering - On Arrival / Keyword blacklist page and click New.
4. On the Filter properties tab, set the scope to Email header (raw MIME)
5. Add a comment (e.g., "Doc" in the From: header line)
6. On the Filter expression tab, set the expression type to "Regular expression" and copy/paste the following to the "Keyword\regular expression" field:


7. Click OK
8. Save the configuration to apply the changes by pressing Ctrl + S.

Note that we suggest relying on automated tests whenever possible and discourage adding manual expressions to the configuration each time a new type of spam appears: please make sure you are using the recommended DNS Blacklists and URL blacklists (see our best practices guide at

by Krisztian Fekete (Vamsoft) 6 years ago

New comment

Fill in the form below to add a new comment. All fields are required. If you are a registered user on our site, please sign in first.

Email address (will not be published):
Your comment:

ORF Technical Support

Configuring, installing and troubleshooting ORF.

News & Announcements

Your dose of ORF-related news and announcements.

Everything but ORF

Discuss Exchange and system administration with fellow admins.

Feature Test Program

Feature Test Program discussion. Membership is required to visit this forum.

ORF Beta

Join the great bug hunt of the latest test release.

Customer Service

Stay Informed