I would suggest using a weight system and create a negative weight for your whitelist so those on the whitelist will not be able to get away with too much.
For example: if you have @123.com whitelisted and someone sends spam, it will not fail, however, if you gave them a -15 and the massage failed enough tests it would more than likely be held by Declude. I have not seen any legitimate mail (in my opinion) from DartMail.com Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
