[Exim] RBL help and blocked host

I am running on exim 4.14.

ok...heres my issue, any help is appreciated.

I attempting to block some countries from send email to me. in the
blocked_ip file I have 218.0.0.0 and some mail is coming to me from them.
Is the syntax look correct for hostlist blocked_ip.

i have the blocked_host file set like this

218.0.0.0/8
217.100.2.0/24

=====
Also I am attempting to deny known spam servers. I created the dnslists
at the bottom. But when i check some spam that i recieved they should be
denied. Can anyone see why spam is still coming to me if i am requesting
the list from the RBLs.

Is there a port i have to open on my firewall fro the queriesto go to the
RBL sites??

THANKS!!






hostlist relay_from_hosts = 127.0.0.1
hostlist blocked_ip = /usr/exim/filter/blocked_ip
hostlist blocked_hosts = /usr/exim/filter/blocked_host
hostlist rbl_hosts = ! 172.17.0.0/16 : 172.20.0.0/16


========================================================

######################################################################
#                       ACL CONFIGURATION                            #
#         Specifies access control lists for incoming SMTP mail      #
######################################################################

begin acl


# acl_check_rcpt:
acl_check_rcpt:

deny    local_parts   = ^.*[@!/|] : ^\\.
#deny    local_parts   = ^.*[@%!/|] : ^\\.
accept  local_parts   = /usr/exim/local
#         domains       = +local_domains
         domains       = +relay_to_domains

deny hosts = +rbl_hosts
#    message       = rejected because $sender_host_address is in a black
list at $dnslist_domain\n$dnslist_text
#     dnslists      = sbl.spamhaus.org=127.0.0.2 : \
#                               relays.ordb.org : \
#                               lists.dsbl.org : \
#                               orbs.dorkslayers.com : \
#                               dnsbl.njabl.org=127.0.0.4

deny dnslists = blackholes.mail-abuse.org : list.dsbl.org : bl.spamcop.net
deny dnslists = sbl.spamhaus.org=127.0.0.2
deny dnslists = relays.ordb.org

warn    hosts = +rbl_hosts
 message       = X-Warning: $sender_host_address is in a black list at
$dnslist_domain
         log_message   = found in $dnslist_domain
         dnslists      = blackholes.wirehub.net=127.0.0.2

  accept  domains       = +relay_to_domains
  accept  hosts         = +relay_from_hosts
  deny    message       = relay not permitted

acl_check_data:
accept