reverse database

If the MTA does not need to rewrite backward pointing addresses then you can set USE_REVERSE_DATABASE=0 in option.dat. I have in the past set this parameter while trying to get every last milisecond of performance out of an MTA. Most ISPs will not require the MTAs to rewrite backward pointing addresses.

openbsd secure by default, do you trust your OS?