Passing Spam RSS Back to forum
@tharris:
Hello,
That log message is an intermediate status logged for the email. ORF rarely logs intermediate statuses, but in this case the "Always log SPF check results" option is enabled at http://vamsoft.com/support/docs/orf-help/5.0/adm-spfsettings. In a sense, passing the SPF check does not explain why the email in question slipped through the checks.
For general advice on achieving better spam filtering performance, I recommend reviewing our Best Practices Guide at http://vamsoft.com/support/docs/how-tos/best-practices-5.0. If the spam filtering performance has dropped significantly recently, or if you need personalized assistance, please send the following to for analysis:
* The configuration file called orfent.ini (located in Program Files (x86)\ORF Fusion by default).
* The .log files related to the issue (orfee-2014-08-19.log, orfee-2014-08-20.log files, located in Program Files (x86)\ORF Fusion by default). Please send raw .log files, ORF Log Viewer CSV exports are not suitable.
Thank you.
ORF has been passing spam with the class "System Message" example below:
-------------------------------------------------------------------------------
-- EVENT SUMMARY --
Time: 8/19/2014 12:45:54 PM GMT-0500 Central Daylight Time
Sender Email:
Recipient Email:
Related IP: 209.18.93.171
Action: (not available)
Email Subject: This week on The Hub!
-- EVENT MESSAGE --
SPF check done for domain "magnetdev.com". Result: SPF Pass
-- EVENT DETAILS --
Filtering Point: On Arrival
Event Class: System Message
Severity: Information
Server: RMCHINEXCH.RMCHIN.INTERNAL
Event Source: MSEXCHANGE
HELO Domain: (not available)
Message ID: (not available)
Log Mode: Verbose
ORF Version: 5.0 REGISTERED
-------------------------------------------------------------------------------
Anyone else had this issue?