As far as I can see, I don’t have any of my email accounts set to ‘tag’, they should all reject.
And in fact, in mainlog I get entries like
ACL105076 H=------ IP address blacklisted at truncate.gbudb.net (127.0.0.2) - ------ set to reject
So why my log files aren’t the same I don’t know. Not that it matters if nothing seems to be broken.
I’m still getting a lot of spam and having to do local filtering as well, but that’s another issue and one I think I’ll just have to put up with for now. Your solution is definitely reducing the overall spam headache.