I have recently installed the newest version of software, (2.1.1.367), and have noticed some strange behavior. I can not say that the same behavior was present in the past or not, I just noticed it.

I have addresses set to be "By-Passed", only a few, and have made an attempt to Blacklist some familiar virus addresses from being able to send mail. These addresses are the familiar addresses from  virus infected emails.

My problem is that even though the addresses are in the Blacklisted "FromEmails" I have been finding that filtering seems to be bypassed for mail from these email addresses. IE:

Postmaster, Support, Management, ETC...

A log entry is below: I can past more if it wold help.

Bypassed all rules for: mailto:marketing@MyDomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - marketing@MyDomain.com from mailto:postmaster@MyDomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - postmaster@MyDomain.com

Marketing is not in the Unfiltered Email List, and Postmaster is in the From Email Blacklist. I have found the same issue for most addresses in the From Email blacklist. mailto:Postmaster@Mydomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. -

When ever you see "Bypassed all rules for", (and I know I am stating ther obvious), there is usually SOMETHING that is letting it through.  Any mistake in a white list can cause this.  Check ALL white lists very carefully.  One "gotcha" would be if you were inserting a valus and hit the enter key when the cursor was not here you thought it was and it leaves a "*" on it's own line.  Anything like that?  I have seen it before!

Dan S.