helo: added DENYSOFT for for DNS timeout, if reject=true