Unfortunately, DNSBL does not work with multi-drop, since the SME server isnt involved in the original incoming smtp connection, and is not able to see the IP address of the sending mail server. (hope that makes sense)
However, RHSBL does still work since it uses the domain name rather than the IP address. There arent as many RHSBL servers, but one you can add is rhsbl.sorbs.net. Search Google for others...
DCC works too, although you have to enable it by editing /etc/mail/spamassassin/v310.pre, by removing the '#' in front of the line for the plugin, then restart the services...
You can also enable Bayes Filtering, but that requires that the users train bayes by sorting the good and bad mail to different folders - something that might be too much work for some.
All of these checks add a little to the overall score assigned to incoming mail, but even without the services mentioned above, Spamassassin still does a decent job of catching spam.