Is there a straightforward (i.e. relatively painless) way to check the header from, reply-to, and message-id domains against dbl.spamhaus.org and reject on a positive reply as with reject_r*bl_client?
Without having to write a content filter to be called in action filter:nexthop in header_checks.pcre? -- Stan