--- a/xml/dnsbl.in	Wed Sep 21 12:35:29 2005 -0700
+++ b/xml/dnsbl.in	Wed Sep 21 12:50:32 2005 -0700
@@ -141,13 +141,15 @@
 dns based lookup scheme (reversed octets of the client followed by the
 dns suffix).
 
-<br><br><li>If the mail has not been accepted or rejected yet, and the
-filtering context specifies a verification host, and the envelope to
-email address is covered by this filtering context, and the verification
-host is not our own hostname, we open an smtp conversation with that
-verification host.  The current envelope from and recipient to values
-are passed to that verification host.  If we receive a 5xy response
-those commands, we reject the current recipient with "no such user".
+<br><br><li>If the mail has not been accepted or rejected yet, we look
+for a verification context, which is the closest ancestor of the
+filtering context that both specifies a verification host, and which
+covers the envelope to address.  If we find such a verification context,
+and the verification host is not our own hostname, we open an smtp
+conversation with that verification host.  The current envelope from and
+recipient to values are passed to that verification host.  If we receive
+a 5xy response those commands, we reject the current recipient with "no
+such user".
 
 <br><br><li>If the mail has not been accepted or rejected yet, and the
 filtering context enables content filtering, and this is the first such

--- a/xml/sample.conf	Wed Sep 21 12:35:29 2005 -0700
+++ b/xml/sample.conf	Wed Sep 21 12:50:32 2005 -0700
@@ -8,7 +8,7 @@
 #
 # CONFIG            = {CONTEXT ";"}+
 # CONTEXT           = "context" NAME "{" {STATEMENT}+ "}"
-# STATEMENT         = (DNSBL | DNSBLLIST | CONTENT | ENV-TO | CONTEXT | ENV-FROM) ";"
+# STATEMENT         = (DNSBL | DNSBLLIST | CONTENT | ENV-TO | VERIFY | CONTEXT | ENV-FROM) ";"
 
 # DNSBL             = "dnsbl" NAME DNSPREFIX ERROR-MSG
 
@@ -30,6 +30,8 @@
 # TO-ADDR           = ADDRESS [";"]
 # DCC-TO            = "dcc_to" ("ok" | "many") "{" DCCINCLUDEFILE "}" ";"
 
+# VERIFY            = "verify" HOSTNAME ";"
+
 # ENV_FROM          = "env_from" [DEFAULT] "{" {(FROM-ADDR | DCC-FROM)}+ "}"
 # FROM-ADDR         = ADDRESS VALUE [";"]
 # DCC-FROM          = "dcc_from" "{" DCCINCLUDEFILE "}" ";"