E-Mail gets deleted by what seems to be Local Bad Sender IPs policy but sender's IP address visible in Message Audit Log (MAL) field "Accepted From:" cannot be found on the Local Bad Sender IPs list.
MAL entry displays following information: - Verdict: System denied IP - Filter Policy: static delete - Action taken: Delete message
Screenshot of MAL verdict:
This works as designed.
Message Audit Log is designed to primarily display IP Address discovered at connection time. Local Bad Sender IPs policy applies to IP Address discovered at connection time as well as any IP addresses discovered in "Received:" headers which are present in "Message Body" part of e-mail message.