User tried to send email, got bounceback:
<Tim@paragonforming.com>: host canit2.digicon.net[63.148.24.209] said: 550
5.7.1 <Tim@paragonforming.com>... Rejected: 208.44.108.226 listed at
sbl-xbl.spamhaus.org (in reply to RCPT TO command)

Went to spamhaus.org, read how to test proper HELO by emailing to helocheck@cbl.abuseat.org, got this back:
<helocheck@cbl.abuseat.org>: host mail.cbl.abuseat.org[216.168.28.54] said: 550 Your HELO name for IP address 208.44.108.226 was "group.shoptocook.com" (in reply to RCPT TO command)

According to their documentation this is correct! HELP!!