also interested in others thoughts on this as it would mean that we would be increasing our internal traffic as we are not just dealling with our outside domains incoming messages but also now dealing with there outbound.

 

Cheers

 

We also added a date field in our tblwl_autowhitelistforcedelivery table that gets updated every time a new email is sent out and picked up with our logparser script or a new whitelisted email comes in (we parse the incoming spamfilter logs as well for whitelisted sender|receiver entries). We hope to start using that date as an indicator  to delete that sender|receiver entry if it has not been updated in 6 months time (either being sent out or emails coming in). Often customers send an email to someone once and never again and it start to really add to the size of the table over time. Once you have close to 10k users it really starts to grow. By parsing the outgoing mail and adding it to the tblwl_autowhitelistforcedelivery table you also cut down on the number of items that end up in quarantine.