Alex wrote:
(how can a mail server be whitelisted while the message body contains a blacklisted URL?)
Pretty trivially; if spam with a blacklisted URI is forwarded from an account handled by a trusted server, the final recipient will see both a whitelisted/trusted relay and a blacklisted URI.
Of course, if mail is forwarded like that, it's not entirely unreasonable to expect the forwarding system to do some spam filtering of its own... in which case the spam wouldn't likely be forwarded in the first place.
-kgd
