sinksmtp: control rules can now check DNS blocklists

The checking is very simple in that we have no option to check what
the DNSBL lookup returns. Sinksmtp does some semi-hack logging of the
results to the SMTP command log (if that's enabled) so that mysterious
rejections are potentially slightly less mysterious to me.