How to Set Your Flag and Block Thresholds
Spamify scores every submission, and two thresholds turn that score into a decision. Get flag_threshold and block_threshold right and you catch spam without ever losing a real message.
At the heart of Spamify is a score. Every submission accumulates points from the checks it fails — bad syntax, a dead mailbox, a tripped honeypot, an over-limit IP. Two settings turn that number into an action, and getting them right is the single most impactful tuning you’ll do.
The two thresholds
flag_threshold— at this score, the submission is flagged for review. It still goes through, but it’s marked so you can inspect it.block_threshold— at this higher score, the submission is blocked outright.
Between them sits a gray zone: suspicious enough to flag, not damning enough to block. Below the flag threshold, submissions pass silently.
The mental model
score < flag_threshold → allow (silent)
flag_threshold ≤ score < block_threshold → allow but flag for review
score ≥ block_threshold → block
Set flag_threshold below block_threshold — the gap is your safety margin. A wide gap means more human review but fewer wrongly-blocked messages; a narrow gap means more automated blocking with less oversight.
How to tune, in practice
- Start permissive. Begin with the defaults, which lean toward flagging over blocking.
- Watch the dashboard for a week. Look at what landed in the flagged bucket. Is it clearly spam? Clearly real? Mixed?
- If the flagged bucket is all obvious spam, lower
block_thresholdso those get blocked automatically. - If real messages are being flagged, raise
flag_thresholda little, or allowlist the specific sender.
Thresholds and hard blocks
Some signals bypass the score entirely — the hard_block_mx and hard_block_smtp rules block an address the moment a mail server confirms it’s dead, regardless of threshold. Thresholds govern the accumulated score; hard blocks handle the certainties. And if you want the layer scores themselves adjusted, see tuning the engine weights.
Stop spam at the source with Spamify
Self-contained email validation and bot protection for WordPress — syntax checks, honeypot, rate limiting and optional SMTP verification, all on your own server.
Get the free plugin