Increase in spam getting through

In the last month or two we have noticed an increase in spam getting through ORF. ORF has been rock solid for years so we're surprised by this and we're not sure what to do to fix it. The content is always the same and references Business Week Journal with a link to a malware site. Can anyone offer some advice on what we could check/change in our configuration?
Thanks.

Kevin (December 13, 2010)

Sorry, I didn't give much information in my post. We're using ORF Enterprise 4.2, running on a Windows 2003 box.

Kevin (December 13, 2010)

@Kevin: First of all, I suggest checking the ORF logs using the Log Viewer (http://blog.vamsoft.com/2010/04/21/using-the-orf-log-viewer/) for error messages: it is possible that an error/malfunction prevents ORF from filtering properly. Do you see any errors or anything unusual?

I also recommend updating your DNS and URL Blacklist definition sets (if you are on version 4.2, they might be a little outdated) and enable the ones we recommend. For more information about the recommended configuration and for detailed instructions regarding the update of the above mentioned definitions, please read our blog post at http://blog.vamsoft.com/2010/05/20/configuration-used-for-the-vbspam-test/ and our best practices guide at http://www.vamsoft.com/downloads/getmostguide.pdf

Krisztian Fekete (December 13, 2010)
in response to this post

Thanks. I've updated the lists and selected the configuration suggested in the blog post. I'll keep an eye on things but hopefully that will take care of the issue. Cheers!

Kevin (December 13, 2010)

@Kevin: Glad I could help :) If the problem still persist after you fine-tuned the configuration, please send us your configuration file called orfent.ini and some recent .log files to and we will look into this. These files are located in Program Files \ ORF Enterprise Edition by default. (Please send raw .log files, Log Viewer CSV exports are not suitable).

Krisztian Fekete (December 14, 2010)
in response to this post