What is the processing order for the antispam feature?

The Juniper SRX antispam feature checks messages in a specific order when both local lists and the SBL server are used.

The processing order is:

Local allowlist is checked first. If there is a match, the message is allowed, and no further antispam checking is performed.

Local blocklist is checked second. If there is a match, the configured spam action is applied.

Spam Block List (SBL) server is checked last. If the sender is not found in the local allowlist or blocklist, the SRX queries the SBL server.

Therefore, the correct processing order is:

allowlist → blocklist → Spam Block List (SBL) server