I've got Authenticated relaying enabled. Any IP I put in Block hosts still gets through and I get warning mails about failed authentication. What to do?
Lionking, I've tested it again (with 9.310-11) and it looks like that Email Protection now has higher priority than SMTP DNAT. That architecture change was probably introduced somewhere in between 9.2 -> 9.3 path.
For HTTP/S, DNAT rules still have higher priority before forwarding traffic to Webserver Protection module.