1 2 FREQUENTLY ASKED QUESTIONS 3 -------------------------- 4 5Q: Although the e-mail address is in my ignore file, spamguard still adds this 6 address to the badmailfrom file, is there a bug? 7 8 9A: [for spamGuard Vs. >= 1.7] This behaviour has been changed in release 1.7. 10 The e-mail address is in ignore file never be blocked. The new config file 11 "highfile" will be used to block the addressed send mail more than pcnt 12 value. 13 14 [for old versions] No, it's not a bug, it's a feature. As explained in the 15 README, there are three threshold values: 16 17 If someone sends less mails than warning value, he's simply discarded, 18 19 If someone sends more mails than warning value, less than block, he's not 20 blocked, but a warning mail is sent to the sysadmin. 21 22 If someone sends more mails than block value and less than paranoid value, 23 the address is checked against ignore list and badmailfrom, if the 24 address is existent on the lists, it's not blocked, if not it's added to 25 the badmailfrom file. 26 27 If someone sends even more mails than paranoid value, it's checked against 28 badmailfrom to see whether this address has been added to it before. Note 29 that the address is not checked against ignore file here. Paranoid mode 30 means "I don't care whether he's in my ignore list, if he sends this much 31 mails, nuke the blooddy spammer!". 32 33 So, you do have a chance to specify paranoid threshold to a very high value, 34 say 1000000, if you don't want the "paranoid functionality". 35