Increase in spam getting through RSS Back to forum
Sorry, I didn't give much information in my post. We're using ORF Enterprise 4.2, running on a Windows 2003 box.
@Kevin:
First of all, I suggest checking the ORF logs using the Log Viewer (http://blog.vamsoft.com/2010/04/21/using-the-orf-log-viewer/) for error messages: it is possible that an error/malfunction prevents ORF from filtering properly. Do you see any errors or anything unusual?
I also recommend updating your DNS and URL Blacklist definition sets (if you are on version 4.2, they might be a little outdated) and enable the ones we recommend. For more information about the recommended configuration and for detailed instructions regarding the update of the above mentioned definitions, please read our blog post at http://blog.vamsoft.com/2010/05/20/configuration-used-for-the-vbspam-test/ and our best practices guide at http://www.vamsoft.com/downloads/getmostguide.pdf
Thanks. I've updated the lists and selected the configuration suggested in the blog post. I'll keep an eye on things but hopefully that will take care of the issue. Cheers!
@Kevin: Glad I could help :) If the problem still persist after you fine-tuned the configuration, please send us your configuration file called orfent.ini and some recent .log files to and we will look into this. These files are located in Program Files \ ORF Enterprise Edition by default. (Please send raw .log files, Log Viewer CSV exports are not suitable).
In the last month or two we have noticed an increase in spam getting through ORF. ORF has been rock solid for years so we're surprised by this and we're not sure what to do to fix it. The content is always the same and references Business Week Journal with a link to a malware site. Can anyone offer some advice on what we could check/change in our configuration?
Thanks.