Brice,

All the white lists are checked first. If a match is found, the blacklists are skipped, the email recipients are accepted, and SpamFilter is ready to accept the data command. If none of the whitelists are matched, then the blacklists are searched in the following order:

1. Local FROM Domains Blacklist
2. Local FROM Emails Blacklist
3. No Reverse DNS (this is calculated at connection time)
4. Reject Empty Mail From
5. Reject Same To/From
6. Recipient Count > Max RCPT TO
7. Country Blacklisted
8. Local Emails TO Blacklist
9. Authorized TO Emails
10. Allowed Domains
11. MAPS check
12. Keywords check

The only exception to the whitelist is the "whitelist keyword check". In order for that to work, the message has to be received first, and for this reason even if the senders is blacklisted by other filters, the email will still be received so that it can be checked against the keyword whitelist.

Once a blacklist "hits", all further blacklist checks are skipped.

Roberto F.
LogSat Software