That's odd... please post the following information:
1) DNS lookup of othersite.com from the machine having the issue
2) Request and response headers for the failing request (obviously, disable NoScript to get this)
*Always* check the changelogs BEFORE updating that important software!
[ABE] <LOCAL> Deny on {GET http://download.othersite.com/ffk/color.png <<< http://www.mysite.com/test.html - 3}
SYSTEM rule: Site LOCAL Accept from LOCAL Deny
I don't know why I haven't seen it yesterday. I now added a rule, but with no luck:
Yes, overriding the SYSTEM rule has to be placed above it in SYSTEM. It thinks that othersite is LOCAL...
If that is unexpected at all, please do a DNS lookup of othersite as above before adding an exception.