I'm strongly tempted to make a public form for submitting whitelist entries, fully logged, rate-limited and reviewed, of course. It could help with the FPs and add more public visibility to the whitelisting process.
Hmm - given experiences of several associates I would probably make that a hand reviewed process, possibly requiring a text justification to accompany the removal request. I have heard of trojaned PC's being used to abuse these kinds of services from multiple locations in order to avoid the rate limiting thing.
Seeing as SURBL is beginning to make a rather impressive impact on spam for so many users, I would suggest avoiding any easily/possibly abuseable options.
Yep, I would add one of those munged graphics as well that the user must type in the code to make sure only "real people" are submitting whitelist requests. :)
Rob M.