Ah found it! Its in the 'mailConfig.xml' file making it slightly harder to edit :(
Next question (proposed idea?) - Can we have a separate 'SMTP_BlockList.xml' file so we can add data to that ourselves via 3rd party applications ? I believe this could greatly help against spam combat ?