Let me explain why I think ignorelist and blacklist
should be checked before whitelist: In my university I
often receive mail from people I don't know (clerks,
other teachers, students, etc.) that should be
delivered ASAP. That's why I whitelist the entire
university domain. Nevertheless, some spammers send
email using also the university domain. Previously, I
catched their first try and blacklisted them, but now
(2.4.1) I can't do that anymore.
Maybe the order should be configurable.