[Disclosure: I'm involved with the dnswl.org project] SA 3.2.0 misses one rule to get the actual dnswl.org lookup rules working (reported in http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5450, targetted for resolution in 3.2.1).
In order to use dnswl.org lookups already today, add the following to your local.cf or other appropriate location: header __RCVD_IN_DNSWL eval:check_rbl('dnswl-firsttrusted', 'list.dnswl.org.') For additional information on the project, see http://www.dnswl.org/. -- Matthias