That was on Snort, posts are blocked but not the notification which allows the spammer to somewhat bypass the block.