You should fix URIBL_BLOCKED first. You need a local, caching, non-forwarding DNS server for SpamAssassin.
Yeah, setting up a DNS server for SA is on my todo list. Thanks.When you say local, it doesn't have to be on the same machine as spamassassin, does it? I assume I can have the DNS server on a local network and shared between many machines.