[Exim] Two questions

Greetings.

#Q01#

#i check message header about spamcheckers marks

spam_router:
    driver = accept
    condition = "${if or { {match {$h_X-Spam:}{(?i)Yes|unknown}}\
        {match {$h_X-Bogosity:}{(?i)Yes}} } {yes} {no}}"
    transport = deliver_lmtp

#this is my standart lmtp deliver

deliver_lmtp:
    driver = smtp
    protocol = lmtp
    hosts_override
    hosts = 192.168.0.4
    user = cyrus
    allow_localhost
    return_path_add

# i want to deliver all messages, which "yes" in spam_router: to spam mailbox.
# mailbox spam exists in cyrus such as public.spam
# how i can redirect in spam_router any message by condition into spam box?
# i think i must change $local_part from 'anyuser' to 'spam'

#Q02#

#some dnsbl contains many good hosts. i want following:
#if somedomain.org exists in 2 or more dnsbl hosts, then reject connect from somedomain.org
#i have config:

hostlist rbl_hosts = ! +localadds: ! +my_mx_hosts: 0.0.0.0/0

#in acl_check_rcpt:
deny hosts = +rbl_hosts
    message = host is listed in $dnslist_domain
    dnslists = blackholes.mail-abuse.org:\
        dialups.mail-abuse.org:\
        relays.mail-abuse.org:\
        relays.ordb.org:\
        work.drbl.caravan.ru:\
        dul.ru:\
            bl.spamcop.net:\
        cbl.abuseat.org:\
        dnsbl.njabl.org:\
        dnsbl.sorbs.net:\
        sbl.spamhaus.org

# how i can use my thinks about checks 2 or more entries somedomain.org in dnsbl hosts?

Thanks.