supports SMTP authentication - that is, users can bypass the blacklist listing by authenticating via SMTP AUTH
supports sender address verification or sender callbacks (see milter-sender) - most SMTP callbacks are made using the null-envelope sender address. When we see this, we defer our blacklist checks until the SMTP DATA stage (or xxfi_data() callback in Sendmail 8.14.0+'s milter API)
customizable blacklists (defaults are SpamCop and Spamhaus) and whitelists (default is to use DNSWL.org) - we chose these blacklists and whitelists due to various documents online comparing some of the popular blacklists. See links provided in the "Links" section