I wonder where is that thresold counter and how it work ? We use mysql
backend with shared mode over all users
Retraining a mail coming from a whitelisted address (whitelisted by
mistake because more than 5 messages were received in a very short
period of time) I can see the M line in system.log for my shared user :
1213265141 M USER <[EMAIL PROTECTED]> 1,485112987941976815114 Fwd:
NATURAL WONDERS OF AGEAN COAST 0.459085 __shared__ Retrained <[EMAIL PROTECTED]
>
This figure me out that the signature was correctly found and
retrained by dspam, but the issue is that the next mail coming from
same address is still whitelisted.. I thought a whitelisted address
would be immediatly delisted as soon as spam is retrained for it ?
So why ? And how to solve this ?
Regards,
David.
!DSPAM:1011,48514b3a150921749015210!
