# Confusing spam threshold host error message

**URL:** https://meta.discourse.org/t/confusing-spam-threshold-host-error-message/178332
**Category:** UX
**Created:** [February 3, 2021, 10:08pm UTC](https://meta.discourse.org/t/confusing-spam-threshold-host-error-message/178332 "2021-02-03T22:08:07Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![simon](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/simon/32/339122_2.png) [@simon](https://meta.discourse.org/u/simon)
#### Post date: [February 3, 2021, 10:08pm UTC](https://meta.discourse.org/t/confusing-spam-threshold-host-error-message/178332/1 "2021-02-03T22:08:08Z")

</div>

I’m posting this here because it’s something that had me puzzled for a while. When a new user creates multiple posts that contain links to the same domain, all of their posts may be hidden due to the `newuser spam host threshold` setting. There are two things that confused me about this behaviour.

The first issue is that either the setting’s copy or its implementation seems to be off. The copy says:

> How many times a new user can post a link to the same host within their `newuser_spam_host_threshold` posts before being considered spam.

I interpret this to mean that with the default setting of 3 posts, the user can create three posts with links to the same domain. When I test this on my site, the user can only create 2 posts with links to the same domain. Based of the description, I would expect the user to be able to create 3 posts and have the spam flags triggered by their 4th post.

The second issue is with the message that is shown to admins for the review item:

> This new user tried to create multiple posts with links to the same domain. All posts from this user that include links should be reviewed. See the [newuser\_spam\_host\_threshold](http://localhost:3000/admin/site_settings/category/spam) site setting.

The post that triggered the spam threshold is never created. When the user attempts to create it, it is blocked with this error message:

 ![image](https://global.discourse-cdn.com/meta/original/3X/8/7/87ad3d5f37b8ac8f8fc370e7c8100babb3ccd8a3.png)

When looking into an issue related to this, it was unclear to me why the threshold was being triggered because the post that actually triggered the issue doesn’t get added to the review queue. This is especially confusing on sites that have set their `newuser spam host threshold` to 2 posts. In that case, only a single post shows up in the review queue and it’s hard to know why it is there.

---

<div class="post-metadata">

### Author: ![Cate\_Soule](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/cate_soule/32/492770_2.png) [@Cate\_Soule](https://meta.discourse.org/u/Cate_Soule)
#### Post date: [August 7, 2025, 1:51am UTC](https://meta.discourse.org/t/confusing-spam-threshold-host-error-message/178332/3 "2025-08-07T01:51:32Z")

</div>

Is there a way to disable it? I had this happen last night. Older posts are getting flagged because of it.

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [August 13, 2025, 11:20pm UTC](https://meta.discourse.org/t/confusing-spam-threshold-host-error-message/178332/4 "2025-08-13T23:20:17Z")

</div>

You can disable this protection on your forum by bumping up `newuser_spam_host_threshold`

Surprisingly it is set to 100 here on meta and I am not noticing any particularly concerning behaviors. In the age of AI spam scanning this protection is less important.

@hugh any thoughts here?
