most of the mta firewalling is not exim specific