ARIN apparently has an API for accessing WHOIS data, which may be useful, and
Could you (and, would you want to) perhaps look up SPF records for domains your mail server contacts frequently and if present specifically "white-list" some of those in this system?
Just thoughts, in case they might prove useful.
Comment on Re^3: Ideas solicited: Using Perl to sort through Toxic CIDR blocks