About the anti-spam local black and white list, which of the following statements is wrong?

created manually by the user on the USG

black and white list is matched by the sender's DNS suffix

black and white list is by extracting the source IP address of the SMTP connection to match

if the source IP address of the SMTP connection matches the blacklist, blocking the connection