Increase in spam getting through RSS

1

In the last month or two we have noticed an increase in spam getting through ORF. ORF has been rock solid for years so we're surprised by this and we're not sure what to do to fix it. The content is always the same and references Business Week Journal with a link to a malware site. Can anyone offer some advice on what we could check/change in our configuration?
Thanks.

by Kevin 8 years ago
2

Sorry, I didn't give much information in my post. We're using ORF Enterprise 4.2, running on a Windows 2003 box.

by Kevin 8 years ago
3

@Kevin: First of all, I suggest checking the ORF logs using the Log Viewer (http://blog.vamsoft.com/2010/04/21/using-the-orf-log-viewer/) for error messages: it is possible that an error/malfunction prevents ORF from filtering properly. Do you see any errors or anything unusual?

I also recommend updating your DNS and URL Blacklist definition sets (if you are on version 4.2, they might be a little outdated) and enable the ones we recommend. For more information about the recommended configuration and for detailed instructions regarding the update of the above mentioned definitions, please read our blog post at http://blog.vamsoft.com/2010/05/20/configuration-used-for-the-vbspam-test/ and our best practices guide at http://www.vamsoft.com/downloads/getmostguide.pdf

by Krisztian Fekete 8 years ago
(in reply to this post)

4

Thanks. I've updated the lists and selected the configuration suggested in the blog post. I'll keep an eye on things but hopefully that will take care of the issue. Cheers!

by Kevin 8 years ago
5

@Kevin: Glad I could help :) If the problem still persist after you fine-tuned the configuration, please send us your configuration file called orfent.ini and some recent .log files to and we will look into this. These files are located in Program Files \ ORF Enterprise Edition by default. (Please send raw .log files, Log Viewer CSV exports are not suitable).

by Krisztian Fekete 8 years ago
(in reply to this post)

New comment

Fill in the form below to add a new comment. All fields are required. If you are a registered user on our site, please sign in first.

Nickname:
Email address (will not be published):
Your comment:

ORF Technical Support

Configuring, installing and troubleshooting ORF.

News & Announcements

Your dose of ORF-related news and announcements.

Everything but ORF

Discuss Exchange and system administration with fellow admins.

Feature Test Program

Feature Test Program discussion. Membership is required to visit this forum.

ORF Beta

Join the great bug hunt of the latest test release.

Customer Service

Stay Informed