If you get inbound email forwarded by static upstream hosts (e.g. from your ISP, or from an external MX), you MUST add these hosts to this list, otherwise the Spam Protection will not work properly. If you exclusively get inbound mail forwarded by upstream hosts, it is recommended to check the Upstream/Relay hosts only checkbox. This will limit access to SMTP to upstream and relay hosts (including authenticated relays).