--- a/xml/dnsbl.in	Wed Sep 21 12:35:29 2005 -0700
+++ b/xml/dnsbl.in	Wed Sep 21 12:50:32 2005 -0700
@@ -141,13 +141,15 @@
 dns based lookup scheme (reversed octets of the client followed by the
 dns suffix).
 
-<br><br><li>If the mail has not been accepted or rejected yet, and the
-filtering context specifies a verification host, and the envelope to
-email address is covered by this filtering context, and the verification
-host is not our own hostname, we open an smtp conversation with that
-verification host.  The current envelope from and recipient to values
-are passed to that verification host.  If we receive a 5xy response
-those commands, we reject the current recipient with "no such user".
+<br><br><li>If the mail has not been accepted or rejected yet, we look
+for a verification context, which is the closest ancestor of the
+filtering context that both specifies a verification host, and which
+covers the envelope to address.  If we find such a verification context,
+and the verification host is not our own hostname, we open an smtp
+conversation with that verification host.  The current envelope from and
+recipient to values are passed to that verification host.  If we receive
+a 5xy response those commands, we reject the current recipient with "no
+such user".
 
 <br><br><li>If the mail has not been accepted or rejected yet, and the
 filtering context enables content filtering, and this is the first such