[Dspam-user] Proposed change in whitelist behaviour/undo whitelisting
Over the past months (I've been distracted) I discussed with Stevan
Bajic some change in the way DSPAM whitelists email addresses, and
would like to ask what your take on it is.
Basically the one single aspect in which DSPAM fails me is that once
it's decided to whitelist an email address, it's really hard to tell
it not to.
The proposed change would affect how the whitelist threshold config
variable works, and therefore needs to be carefully considered, hence
my posting here.
The current behaviour:
- A token needs 15x more innocent hits than spam hits to be
considered for whitelisting, and
- the token also needs to have more innocent hits than the whitelist
The proposed change is:
- Consider a token whitelisted when:
innocent hits - spam hits > whitelist threshold.
- Reset innocent hits to zero once a whitelist token gets a spam
Aside from removing a magic factor, the behaviour shouldn't be too
different. For a new token that hasn't got spam hits, the whitelist
threshold config variable would still determine how many innocent hits
are needed to whitelist the token.
It's when the token also has spam hits that the behaviour becomes much
more responsive. A single spam hit would stop a whitelisted token from
If you kicked the token out of the whitelist that way, you'd then not
need 15 *times* as many innocent hits as spam hits, but "whitelist threshold"
*more*. It still depends on how often the token has been marked as
spam how long it'll take to whitelist it again.