Introduction

The following article describes the process of updating your DNS and SURBL definitions in ORF. DNS blacklist are online databases of spam sending hosts, while SURBLs are online databases of "spamvertized" URLs which are present in the email body of spam emails. Both databases are queried real time by ORF via DNS.

Having up-to-date DNS and SURBLs definitions in ORF and using the recommended lists are the easiest and most efficient way to catch spam. Please consult our Best Practices Guide regarding the lists we recommend.

Updating DNS Blacklist definitions

1. Download the latest definition file and extract its contents to an arbitrary folder
2. Start the ORF Administration Tool and connect to the local or a remote ORF instance
3. Navigate to the Blacklists / DNS Blacklists page
4. Right-click anywhere in the list and select Import blacklist definitions...
5. Select the blacklists.xml file that you extracted in step 1)
6. Make sure the Full import overwrite checkbox is checked and click OK. You should get a DNS blacklist definitions have been imported successfully message, dismiss it by clicking OK
7. Enable the blacklists you want to use (see our recommendations)
8. Save your settings to apply the changes by pressing Ctrl + S

Updating SURBL definitions

1. Download the latest definition file and extract its contents to an arbitrary folder
2. Start the ORF Administration Tool and connect to the local or a remote ORF instance
3. Navigate to the Blacklists / SURBL test page
4. Right-click anywhere in the list and select Import definitions...
5. Select the surbls.xml file that you extracted in step 1)
6. Make sure the Full import overwrite checkbox is checked and click OK
7. Enable the blacklists you want to use (see our recommendations)
8. Save your settings to apply the changes by pressing Ctrl + S