Necessary Setting for connecting to IP-Blacklist Providers

Hi,

We have some edge servers that use the default free IP-blacklist provider

Name                                    LookupDomain                            Priority

----                                    ------------                            --------

SpamHAUS                                zen.spamhaus.org                        1

ABUSEAT CBL                             cbl.abuseat.org                         5

SORBS                                   dnsbl.sorbs.net                         6

SPAMCOP                                 bl.spamcop.net                          2

Surriel                                 psbl.surriel.com                        3

Not Just Another Bogus List             dnsbl.njabl.org                         4

but they are in DMZ and their connection to outside is just limited to some ports and maybe even just to some SMTP Agents and servers outside (or for example just smtp to outside and from outside)

so, which ports and type of queries are needed and should be allowed in order to provide access for edge servers to connect to these sites and get the latest list ?

and another question :

how can i find what was the latest update from these sources and when it has happened ?

Thanks