ORDB Returns False Positives on All Incoming Mail

  • 3614361
  • 27-Mar-2008
  • 27-Apr-2012

Environment

Novell GroupWise Internet Agent (GWIA) 6.5
Novell GroupWise Internet Agent (GWIA) 7
Novell GroupWise 6.5
Novell GroupWise 7
Novell NetWare 6.5
Novell SUSE Linux Enterprise Server 9
Novell SUSE Linux Enterprise Server 10

Situation

3.25.08 - Systems using the decommissioned ORDB (Open Relay DataBase) service in their SPAM filtering configurations experience false positives for all IP addresses/hosts both valid and invalid thus blocking all incoming mail.

Resolution

Remove the 'ordb.org'references from any SPAM filter configuration lookup.

Additional Information

ORDB.ORG was decommissioned in December of 2006. Some administrators did not remove the service lookup from their anti-SPAM filter protocols. When the server(s) for the .org came online once again March, 25, 2008, they were configured to return false positives for all IP addresses both valid and invalid, thus effectively causing all email ... both valid and invalid ... to be blocked by a firewall/anti-SPAM filter that was still configured to use the ordb.org query. The intended effect seemed to be to force the removal of this service by all parties.