In the config doc of a 8.5.3 Domino server, I enabled the Private Blacklist Filter; set Blacklist the following hosts to *testdomain.com; and set the Desired action to Log and tag message. Messages that have come in from someuser@mail.testdomain.com have no $DNSBLSite field added to them.