Hi,

No bug?

Yes. A deprecate behaviour is, if the forum sends mails to anyone, i.e. people, which are *not* members of your forum. In your case, the *user enabled* the option "everyone can mail me" and "everyone" means "everyone" in particular non-desired mails. Akismet is used to check for SPAM but this will never be detect 100 % SPAM.

So anybody can send emails to users who allow to be contacted by email?

If the user enabled this option, yes. The user can disable this feature to stop the receiving of SPAM-mails (as well as normal ones).

/Micha