Why isn't the blacklist working for tickets created through the Web Widget or the Web Form?
The blacklist only blocks tickets created with the email channel, unless a
reject: modifier is added to the blacklist.
To block all tickets regardless of channel, use
reject:domain.com to block the domain or email of your choice.
In the example below, all tickets created by email@example.com will be rejected, regardless of the channel where their tickets were created.
For complete instructions on controlling access to Zendesk Support, see Using the whitelist and blacklist to control access to Zendesk Support.
If you are experiencing a large spam attack through the web form, Web Widget or API, see Combatting spam via the web service.