Organization spam control: whitelist vs. TLD blacklist

Organization spam control: whitelist vs. TLD blacklist

I am having a problem that I am sure is very typical: there is a lot of spam coming from a specific TLD, but there is also some legitimate correspondence with several domains under that same TLD. I was hoping that organization spam control options in the control panel would allow me to block the entire TLD, but whitelist the legitimate domains under that TLD. I did try it, and it does not work - whitelisted domains remain blocked anyway. Suggestion: rearrange the processing sequence so that a domain whitelist could override both a domain blacklist and a TLD blacklist.