Following the instructions here:
http://www.tnpi.biz/internet/mail/toaster/filtering/reverse-dns.shtml
The toaster is now blocking all connections.
DNS is functional on the box as dig -x can resolve ip's blocked by the toaster as found in
/var/log/mail/smpt/current
...
ok, just answered my own question. for this to work:
smtpd_lookup_tcpremotehost = 1
must be set. This info would probably be helpful if listed on the URL above.
remember:
perldoc toaster-watcher.conf
is your friend.