Increase in spam getting through - ORF Forums

Increase in spam getting through RSS Back to forum


In the last month or two we have noticed an increase in spam getting through ORF. ORF has been rock solid for years so we're surprised by this and we're not sure what to do to fix it. The content is always the same and references Business Week Journal with a link to a malware site. Can anyone offer some advice on what we could check/change in our configuration?

by Kevin 8 years ago

Sorry, I didn't give much information in my post. We're using ORF Enterprise 4.2, running on a Windows 2003 box.

by Kevin 8 years ago

@Kevin: First of all, I suggest checking the ORF logs using the Log Viewer ( for error messages: it is possible that an error/malfunction prevents ORF from filtering properly. Do you see any errors or anything unusual?

I also recommend updating your DNS and URL Blacklist definition sets (if you are on version 4.2, they might be a little outdated) and enable the ones we recommend. For more information about the recommended configuration and for detailed instructions regarding the update of the above mentioned definitions, please read our blog post at and our best practices guide at

by Krisztian Fekete 8 years ago
(in reply to this post)


Thanks. I've updated the lists and selected the configuration suggested in the blog post. I'll keep an eye on things but hopefully that will take care of the issue. Cheers!

by Kevin 8 years ago

@Kevin: Glad I could help :) If the problem still persist after you fine-tuned the configuration, please send us your configuration file called orfent.ini and some recent .log files to and we will look into this. These files are located in Program Files \ ORF Enterprise Edition by default. (Please send raw .log files, Log Viewer CSV exports are not suitable).

by Krisztian Fekete 8 years ago
(in reply to this post)

New comment

Fill in the form below to add a new comment. All fields are required. If you are a registered user on our site, please sign in first.

It will not be published.
hnp1 | hnp2