Thanks for your reply, much appreciated. Would you still consider allowing Bridges and/or Middle relays? These don't generate any abuse emails at all.
With something like that you are usually best of running on dedicated hardware just to ensure everything is segmented. That's just based on what we've seen in the real world from customer usage.