>YOu're rule sort of dangerous as it may list PBL stuff on non >last-external, etc,
Sort of dangerous ? It works beautifully for us ! Until the recent issues with Bigfish we've had zero false positives and many many many good catches ! I'm only following the guidelines at http://www.spamhaus.org/whitepapers/effective_filtering/ where they state "The first stage is to install the Spamhaus Zen blocklist on your incoming mail relay(s). Zen, which is a combination of Spamhaus's SBL, XBL and PBL blocklists"