Spam Filtering for Microsoft Exchange Server

ORF Enterprise Edition is my spam filter of choice and has been through several generations of Exchange Server versions. The product is licensed per server so regardless of mailboxes or users you only need one license per Exchange Server. The initial year is $239 and each year after that is $99 per year. I haven’t seen any other spam filtering product for an Exchange Server that offers a better price to performance ratio. A fully functional 30 day evaluation version is available for download with no registration being required on the Vamsoft website.

The installation of ORF is straightforward so no need to show all of the screenshots.

orf1.png

The default location is fine.

orf2.png

The installation requires that the Exchange Transport service be restarted.

orf3.png

When the installation finishes, launch the Administration Tool.

orf4.png

Verify the DNS settings. It is preferable to have a minimum of two DNS servers listed.

orf5.png

Test the DNS settings.

orf6.png

I prefer to deselect the “Allow sending statistics anonymously to Vamsoft Ltd in email”.

orf7.png

Enable DNS caching with the following settings.

orf8.png

Configure the tests as shown in the image below.

orf9.png

Enabled the “Spamhaus ZEN” DNS blacklist and move it to the top of the list.

orf10.png

Enable the “Is not a Fully Qualified Domain Name (FQDN)” setting.

orf11.png

Change the “Tarpit Delay” to 90 seconds.

orf12.png

Enable the “uribl.com Blacklist” and move it to the top of the list.

orf13.png

Save the configuration.

orf14.png

Start the ORF service and you’re now filtering spam.

orf15.png

Over time you’ll see similar results and best of all, false positives are basically nonexistent.

orf16.png

orf18.png

orf17.png

ORF also includes a very useful reporting tool and log viewer.

I recommend disabling the spam filtering feature of your Antivirus product and the spam filtering features that are built into Exchange Server so if you do have an issue, there is only one product to resolve it in.

µ