# SpamAssassin rules file: default SPF and DKIM whitelists
#
# Please don't modify this file as your changes will be overwritten with
# the next update. Use @@LOCAL_RULES_DIR@@/local.cf instead.
# See 'perldoc Mail::SpamAssassin::Conf' for details.
#
# <@LICENSE>
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to you under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at:
# 
#     http://www.apache.org/licenses/LICENSE-2.0
# 
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# </@LICENSE>

###########################################################################
# SPF and DKIM whitelist rules

if (version >= 3.0030000)

ifplugin Mail::SpamAssassin::Plugin::SPF

###########################################################################
# These should be primarily envelope-from addresses which send mail that is
# often tagged (incorrectly) as spam or high-profile domains that are common
# targets of spoofing.
# These senders should be considered trusted following proper opt-in and
# opt-out practices, publish abuse reporting procedures, and handle reports
# of abuse promptly.
#
# Whitelist and blacklist addresses are now file-glob-style patterns, so
# "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work.

def_whitelist_auth *@apache.org
def_whitelist_auth *@*.apache.org

def_whitelist_auth *@facebookmail.com
def_whitelist_auth *@walmart.com
def_whitelist_auth *@*.walmart.com
def_whitelist_auth *@*.usaa.com
def_whitelist_auth *@*.citi.com
def_whitelist_auth *@*.chase.com
def_whitelist_auth *@*.dropboxmail.com
def_whitelist_auth *@wellsfargo.com
def_whitelist_auth *@*.wellsfargo.com
def_whitelist_auth *@*.bankofamerica.com
def_whitelist_auth *@*.ally.com
def_whitelist_auth *@postmaster.aol.com
def_whitelist_auth *@usbank.com
def_whitelist_auth *@firsttennessee.com
def_whitelist_auth *@usps.gov
def_whitelist_auth *@*.instagram.com
def_whitelist_auth *@ups.com
def_whitelist_auth *@*.fedex.com
def_whitelist_auth *@*.capitalone.com
def_whitelist_auth *@*.khanacademy.org
def_whitelist_auth *@*.wordpress.com
def_whitelist_auth *@*.visa.com
def_whitelist_auth *@visapayablesautomation.com
def_whitelist_auth *@*.pinterest.com
def_whitelist_auth *@indeed.com
def_whitelist_auth *@*.hyatt.com
def_whitelist_auth *@*.google.com
def_whitelist_auth *@*.sears.com
def_whitelist_auth *@*.jcpenney.com
def_whitelist_auth *@*.landsend.com
def_whitelist_auth *@squaretrade.com
def_whitelist_auth *@bn.com
def_whitelist_auth *@emailbedbathandbeyond.com
def_whitelist_auth *@*.joann.com
def_whitelist_auth *@*.dollargeneral.com
def_whitelist_auth *@*.talbots.com
def_whitelist_auth *@*.wayfair.com
def_whitelist_auth *@*.nordstrom.com
def_whitelist_auth *@*.zillow.com
def_whitelist_auth *@mktgdillards.com
def_whitelist_auth *@*.hollisterco.com
def_whitelist_auth *@*.us-cert.gov
def_whitelist_auth *@*.rei.com
def_whitelist_auth *@duluthtradingemail.com
def_whitelist_auth *@hilton.com
def_whitelist_auth *@*.starwoodhotels.com
def_whitelist_auth *@craigslist.org
def_whitelist_auth *@*.macys.com
def_whitelist_auth *@*.staples.com
def_whitelist_auth *@*.fandango.com
def_whitelist_auth *@*.fandangonow.com
def_whitelist_auth *@*.eddiebauer.com
def_whitelist_auth *@*.eastbay.com
def_whitelist_auth *@*.samsclub.com
def_whitelist_auth *@*.potterybarn.com
def_whitelist_auth *@*.travelocity.com
def_whitelist_auth *@*.oriental-trading.com
def_whitelist_auth *@*.efax.com
def_whitelist_auth *@*.spamcop.net
def_whitelist_auth noreply@apple.com
def_whitelist_auth *@*.apple.com
def_whitelist_auth *@*.insideapple.com
def_whitelist_auth *@*.itunes.com
def_whitelist_auth *@*.att-mail.com
def_whitelist_auth *@*.vzw.com
def_whitelist_auth *@*.vzwshop.com
def_whitelist_auth *@*.fandango.com
def_whitelist_auth *@*.aa.com
def_whitelist_auth *@*.delta.com
def_whitelist_auth *@*.southwest.com
def_whitelist_auth *@*.southwestvacations.com
def_whitelist_auth *@*.spirit-airlines.com
def_whitelist_auth *@*.youversion.com
def_whitelist_auth *@*.ashleystewart.com
def_whitelist_auth *@*.creditkarma.com
def_whitelist_auth *@*.creditsesame.com
def_whitelist_auth *@*.amazon.com
def_whitelist_auth *@*.livingsocial.com
def_whitelist_auth *@*.travelocity.com
def_whitelist_auth *@*.yelp.com
def_whitelist_auth *@*.opentable.com
def_whitelist_auth *@*.pier1.com
def_whitelist_auth *@*.nationalgeographic.com
def_whitelist_auth *@*.lessonplanet.com
def_whitelist_auth *@*.teacherspayteachers.com
def_whitelist_auth *@*.childrensplace.com
def_whitelist_auth *@*.uber.com
def_whitelist_auth *@*.foxnews.com
def_whitelist_auth *@*.cnn.com
def_whitelist_auth *@*.walgreens.com
def_whitelist_auth *@*.cvs.com
def_whitelist_auth *@*.hgtv.com
def_whitelist_auth *@*.starz.com
def_whitelist_auth *@*.golfballs.com
def_whitelist_auth *@*.zales.com
def_whitelist_auth *@*.partycity.com
def_whitelist_auth *@*.petco.com
def_whitelist_auth *@*.nyandcompany.com
def_whitelist_auth *@*.govdelivery.com
def_whitelist_auth *@*.us-cert.gov
def_whitelist_auth *@*.senate.gov
def_whitelist_auth *@*.priceline.com
def_whitelist_auth *@*.travelzoo.com
def_whitelist_auth *@*.uso.org
def_whitelist_auth *@*.checksunlimited.com
def_whitelist_auth *@*.nytimes.com
def_whitelist_auth *@slickdeals.net
def_whitelist_auth *@*.cancer.org
def_whitelist_auth *@*.pinterest.com
def_whitelist_auth *@*.hotwire.com
def_whitelist_auth *@*.dominos.com
def_whitelist_auth *@*.potterybarn.com
def_whitelist_auth *@*.shopstyle.com
def_whitelist_auth *@*.mealtrain.com
def_whitelist_auth *@*.zazzle.com
def_whitelist_auth *@*.finishline.com
def_whitelist_auth *@*.rover.com
def_whitelist_auth *@*.pandora.com
def_whitelist_auth *@*.jcrew.com
def_whitelist_auth *@*.lifeway.com
def_whitelist_auth *@*.sears.com
def_whitelist_auth *@*.jossandmain.com
def_whitelist_auth *@*.maurices.com
def_whitelist_auth *@*.flipboard.com
def_whitelist_auth *@*.nhl.com
def_whitelist_auth *@*.nfl.com
def_whitelist_auth *@*.nba.com
def_whitelist_auth *@*.mlb.com
def_whitelist_auth *@*.containerstore.com
def_whitelist_auth *@*.fitbit.com

def_whitelist_auth *@lists.in.gov
def_whitelist_auth *@listserv.syr.edu
def_whitelist_auth *@list.indiana.edu
def_whitelist_auth *@lists.asu.edu


endif # Mail::SpamAssassin::Plugin::SPF

endif # version >= 3.3.0