Has anyone ever seen a situation where entries in the black_list are not being used or matching?
I'd guess more details would help. The version of SA you're running, how you're calling SA, and perhaps a header and the matching 'entry' from your blacklist that isn't matching...
