First-run flow
Open Orravo Core -> Spam Shield. Six tabs:
- Dashboard - blocked-today count, last-7-days chart, top reasons
- Log - every submission row with form plugin, IP, email, score, reason
- Blocklist - manage
ip,email,domain,keywordentries - Allowlist - exempt trusted senders from every check
- Integrations - toggle the per-form-plugin integrations
- Settings - thresholds, retention, geo, optional 3rd-party checks
Defaults
On first run:
- Honeypot, timing, rate limit, and link/pattern scoring are all enabled
- Geo blocking and disposable-email checks are off until you configure them
- Score threshold defaults to 50 (any submission scoring 50+ is blocked)
- Block message: "Your message was flagged as spam. Please try again or contact us directly." Customize in Settings.
Confirm it works
Open a Contact Form 7 (or supported) form on your site, view source, and you should see the invisible honeypot wrapper and ospam_ts field. Submit the form normally; the row appears in the Log tab with blocked = 0 and a score reflecting any soft matches.
Try filling the honeypot field via DevTools and resubmit. The submission is rejected and a new log row appears with reason = honeypot, score = 100.