1
2			FREQUENTLY ASKED QUESTIONS
3			--------------------------
4
5Q: Although the e-mail address is in my ignore file, spamguard still adds this
6   address to the badmailfrom file, is there a bug?
7
8
9A: [for spamGuard Vs. >= 1.7] This behaviour has been changed in release 1.7.
10   The e-mail address is in ignore file never be blocked. The new config file
11   "highfile" will be used to block the addressed send mail more than pcnt
12   value.
13
14   [for old versions] No, it's not a bug, it's a feature. As explained in the
15   README, there are three threshold values:
16
17   If someone sends less mails than warning value, he's simply discarded,
18
19   If someone sends more mails than warning value, less than block, he's not
20   blocked, but a warning mail is sent to the sysadmin.
21
22   If someone sends more mails than block value and less than paranoid value,
23   the address is checked against ignore list and badmailfrom, if the
24   address is existent on the lists, it's not blocked, if not it's added to
25   the badmailfrom file.
26
27   If someone sends even more mails than paranoid value, it's checked against
28   badmailfrom to see whether this address has been added to it before. Note
29   that the address is not checked against ignore file here. Paranoid mode
30   means "I don't care whether he's in my ignore list, if he sends this much
31   mails, nuke the blooddy spammer!".
32
33   So, you do have a chance to specify paranoid threshold to a very high value,
34   say 1000000, if you don't want the "paranoid functionality".
35