SPAM - BlackList Vs WhiteList

[mgrayson555]

All,

For a given user email, we're attempting to Block ALL email, but allow only for those listed in the White List.

Example

BlackList
*@*

WhiteList
*@website1.com
*@website2.com
*@website3.com


However, it looks as though all email is marked as SPAM and is not allowed through. Meaning the Blacklist of "all" trumps the WhiteList exceptions.

Ideas?
MG