You should also minimize your greylisting block time.
A block of 1 minute seems to work as effectively as the default of 15 minutes.
Do NOT allow users to override greylisting. It will only overload your help desk and give you grey hair trying to troubleshoot
PS: I should have a revised version of my antispam document available within the next two weeks.
Bruce Barnes
ChicagoNetTech Inc
brucecnt@comcast.net
Phonr: (773) 491-9019
Phone: (224) 444-0169
E-Mail and DNS Security Specialist
Network Security Specialist
Customer Service Portal: https://portal.chicagonettech.com
Website: https://www.ChicagoNetTech.com
Security Blog: http://networkbastion.blogspot.com/
Web and E-Mail Hosting, E-Mail Security and Consulting