--- a/dnsbl.dkim.conf	Sat Mar 09 18:53:12 2019 -0800
+++ b/dnsbl.dkim.conf	Sun Mar 10 08:49:27 2019 -0700
@@ -1,3 +1,23 @@
+aim.com                         unsigned_black  "aim.com,mx.aim.com";
+aol.com                         unsigned_black  "aol.com,mx.aol.com";
+aol.de                          unsigned_black  aol.de;
+aol.fr                          unsigned_black  aol.fr;
+emailbuybuybaby.com             unsigned_black  emailbuybuybaby.com;
+federalreserve.com              unsigned_black  federalreserve.com;
+jusmisiones.gov.ar              unsigned_black  jusmisiones.gov.ar;
+my.com                          unsigned_black  my.com;
+westernunion.com                unsigned_black  westernunion.com;
+yahoo.ca                        unsigned_black  yahoo.ca;
+yahoo.co.in                     unsigned_black  yahoo.co.in;
+yahoo.co.jp                     unsigned_black  "yahoo.com,yahoo.co.jp";
+yahoo.com.my                    unsigned_black  yahoo.com.my;
+yahoo.com.tw                    unsigned_black  yahoo.com.tw;
+yahoo.com                       unsigned_black  yahoo.com;
+yahoo.co.uk                     unsigned_black  yahoo.co.uk;
+yahoo.de                        unsigned_black  yahoo.de;
+yahoo.fr                        unsigned_black  yahoo.fr;
+yahoo.in                        unsigned_black  yahoo.in;
+#
 1039rxp.com                     require_signed  1039rxp-com.20150623.gappssmtp.com;
 10news.com                      require_signed  ewscripps.onmicrosoft.com;
 123g.info                       require_signed  123g.info;
@@ -107,7 +127,6 @@
 aiche.org                       require_signed  aiche.org;
 aiga.org                        require_signed  "aiga.org,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 aig.com                         signed_white    aig.com;                        // some unsigned mail via messagelabs
-aim.com                         unsigned_black  "aim.com,mx.aim.com";
 airbnb.com                      require_signed  email.airbnb.com;
 airconway.com                   require_signed  airconway.ccsend.com;
 airstoc.com                     require_signed  airstoc.com;
@@ -171,9 +190,6 @@
 anpanama.com                    require_signed  anpanama.com;
 anthempropane.com               require_signed  anthempropane.com;
 anthemww.com                    require_signed  matw.onmicrosoft.com
-aol.com                         unsigned_black  "aol.com,mx.aol.com";
-aol.de                          unsigned_black  aol.de;
-aol.fr                          unsigned_black  aol.fr;
 apgrents.com                    require_signed  icontactmail6.com;
 aplaceformom.com                require_signed  "aplaceformom.com,aplaceformom.onmicrosoft.com";
 app.bamboohr.com                require_signed  app.bamboohr.com;
@@ -204,7 +220,7 @@
 associationvoice.com            require_signed  associationvoice.com;
 assuretyconsulting.com          signed_white    "assuretyconsulting.com,hubspot.com";   // some unsigned mail via salesforce, no spf record
 astc.org                        require_signed  icontactmail3.com;
-astm.org                        signed_white    astm.org;                       // some unsigned mail from their own servers
+astm.org                        require_signed  astm.org;
 astrazeneca.com                 require_signed  azcollaboration.onmicrosoft.com;
 asurion.com                     require_signed  asurion.com;
 atautosbdc.com                  require_signed  sg01.motosnap.com;
@@ -794,7 +810,6 @@
 email.bjs.com                   require_signed  email.bjs.com;
 email.bostonglobe.com           require_signed  email.bostonglobe.com;
 email.box.com                   require_signed  "email.box.com,mktdns.com";
-emailbuybuybaby.com             unsigned_black  emailbuybuybaby.com;
 email.caesars-marketing.com     require_signed  email.caesars-marketing.com;
 email.calphalon.com             require_signed  email.calphalon.com;
 email.cbssports.com             require_signed  email.cbssports.com;
@@ -1158,7 +1173,7 @@
 e.westernjournalism.com         require_signed  e.westernjournalism.com;
 e.winecountrygiftbaskets.com    require_signed  e.winecountrygiftbaskets.com;
 e.wintersilks.com               require_signed  e.wintersilks.com;
-e.wisteria.com                  require_signed  "e.wisteria.com,wisteria.com";
+e.wisteria.com                  require_signed  "e.wisteria.com,wisteria.com,esp1.co";
 ewomennetwork.com               signed_white    ewomennetwork.com;
 e.woolovers.com                 require_signed  e.woolovers.com;
 exacttarget.change.org          require_signed  exacttarget.change.org;
@@ -1199,7 +1214,6 @@
 fastspring.com                  require_signed  fastspring.com;
 fatherly.com                    require_signed  fatherly-com.20150623.gappssmtp.com;
 fedbarlive.org                  signed_white    "emsend.com,em.secureserver.net";   // emsend signing with domainkeys, not dkim
-federalreserve.com              unsigned_black  federalreserve.com;
 fedex.com                       require_signed  fedex.com;
 fedgovconnect.org               require_signed  fedgovconnect-org.20150623.gappssmtp.com;
 feedvisor.com                   require_signed  "feedvisor-com.20150623.gappssmtp.com,feedvisor.com";
@@ -1225,7 +1239,7 @@
 fladems.com                     signed_white    "fladems.com,bounce.bluestatedigital.com";
 fladems.org                     signed_white    bounce.bluestatedigital.com;
 flagandbanner.com               require_signed  omktmail2.com;
-flagsource.com                  require_signed  "flagsource.ccsend.com,*.onmicrosoft.com;
+flagsource.com                  require_signed  "flagsource.ccsend.com,*.onmicrosoft.com";
 flaticon.com                    require_signed  "mandrillapp.com,mailchimpapp.net,flaticon.com";
 flaviar.com                     require_signed  flaviar.com;
 flexjobs.com                    require_signed  flexjobs.com;
@@ -1532,7 +1546,6 @@
 joshshapiro.org                 signed_white    bounce.bluestatedigital.com;
 jstor.org                       require_signed  jstor.org;
 judsonsart.com                  require_signed  icontactmail3.com;
-jusmisiones.gov.ar              unsigned_black  jusmisiones.gov.ar;
 justice.org                     require_signed  justice.org;
 kaarmadealer.com                require_signed  kaarmadealer.com;
 kaiserhealthnews.org            require_signed  kff.org;
@@ -1685,7 +1698,7 @@
 mailcenter.usaa.com             require_signed  usaa.com;
 mail.change.org                 require_signed  mail.change.org;
 mailchimp.com                   require_signed  mailchimp.com;
-mail.citipricerewind.com        require_signed  mail.citipricerewind.com;       // stupid banks with multiple branding;
+mail.citipricerewind.com        require_signed  mail.citipricerewind.com;       // stupid banks with multiple branding
 mail.crateandbarrel.com         require_signed  mail.crateandbarrel.com;
 mail.digiday.com                require_signed  mail.digiday.com;
 mail.disneydestinations.com     require_signed  mail.disneydestinations.com;
@@ -1868,7 +1881,7 @@
 momentummgt.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 momscleanairforce.org           require_signed  server8839.e-activist.com;
 monotype.com                    require_signed  monotype.com;
-monster.com                     signed_white    monster.com;                    // some unsigned mail via mailsorter.be.tmpw.net;
+monster.com                     signed_white    monster.com;                    // some unsigned mail via mailsorter.be.tmpw.net
 monsterequip.com                require_signed  icontactmail6.com;
 monsterscooterparts.com         require_signed  monsterscooterparts.com;
 morning7.theskimm.com           require_signed  morning7.theskimm.com;
@@ -1900,14 +1913,13 @@
 murphyforflorida.com            signed_white    bounce.bluestatedigital.com;
 musicacademy.org                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 musictoday.com                  require_signed  "mg.musictoday.com,musictoday.com";
-musictogether.com               signed_white    musictogether.ccsend.com;       // some unsigned mail via mail.musictogether.com;
+musictogether.com               signed_white    musictogether.ccsend.com;       // some unsigned mail via mail.musictogether.com
 mvsend.com                      require_signed  mvsend.com;
 mxtoolbox.com                   require_signed  mxtoolbox.com;
 myamextravel.com                require_signed  myamextravel.com;
 my.ba.com                       require_signed  my.ba.com;
 mybbb.org                       require_signed  "mybbb.org,auth.ccsend.com";
 mycase.com                      signed_white    mycase.com;                     // some unsigned mail from salesforce fails strong spf
-my.com                          unsigned_black  my.com;
 my.containerstore.com           require_signed  my.containerstore.com;
 myddi.com                       require_signed  myddi.com;
 myemma.com                      require_signed  myemma.com;
@@ -2152,7 +2164,7 @@
 paylocity.com                   require_signed  paylocity.com;
 paypal.com                      require_signed  paypal.com;
 payproglobal.com                require_signed  email.payproglobal.com;
-payrollcentric.com              signed_white    "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com,em.evolutionhcm.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";  // some unsigned mail via their own servers
+payrollcentric.com              require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com,em.evolutionhcm.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net;ptr:shspma.com";
 payrollcentric.zendesk.com      require_signed  "gmailmarkup.zendesk.com,zendesk.com";
 payroll.fidelity.com            require_signed  payroll.fidelity.com;
 paytrace.com                    require_signed  paytrace.com;
@@ -2384,7 +2396,7 @@
 salamanderresort.com            require_signed  "salamanderresort.com,salamanderhotels.com";
 salonrunner.com                 require_signed  salonrunner.com;
 samplingsupplies.com            require_signed  samplingsupplies.com;
-sandpiperrental.com             require_signed  "sandpiperrental.com,amazonses.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";;
+sandpiperrental.com             require_signed  "sandpiperrental.com,amazonses.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 sanofi.com                      require_signed  sanofi.com;                     // unsigned spam via exacttarget
 santamariasun.com               require_signed  santamariasun-com.20150623.gappssmtp.com;
 santander.us                    require_signed  santander.us;
@@ -2736,7 +2748,7 @@
 undertone.com                   signed_white    undertone.com;                  // mbmg client
 unionbank.com                   signed_white    unionbank.com;                  // some unsigned mail via cashedge
 unionhomemortgage.com           require_signed  eeoo.co;
-unionleague.org                 signed_white    "unionleague.org,unionleague.ccsend.com";   // some unsigned mail via ppe-hosted.com, wrong spf record, include: vs a:dispatch-us.ppe-hosted.com
+unionleague.org                 require_signed  "unionleague.org,unionleague.ccsend.com;a:dispatch-us.ppe-hosted.com";
 uniquephoto.com                 require_signed  uniquephoto.com;
 united.com                      require_signed  united.com;                     // unsigned but passes spf
 unitedyacht.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
@@ -2843,7 +2855,6 @@
 wellsfargorewards.com           require_signed  wellsfargorewards.com;
 wellspouse.org                  require_signed  wellspouse.org;
 wesendit.com                    require_signed  wesendit.com;
-westernunion.com                unsigned_black  westernunion.com;
 westgermanbmw.com               signed_white    "westgermanbmw.com,xtime.com";  // some unsigned mail via media-mastermind
 westinvacations.com             require_signed  iilg.onmicrosoft.com;
 westrock.com                    signed_white    westrockco.onmicrosoft.com;     // some unsigned mail via outlook
@@ -2881,8 +2892,8 @@
 worldsciencefestival.com        require_signed  worldsciencefestival.com;
 wrigley.com                     require_signed  "wrigley.com,e2ma.net";
 wsdisplay.com                   require_signed  wsdisplay-com.20150623.gappssmtp.com;
-wsfsbank.com                    require_signed  wsfsbank.com;
-wsj.com                         signed_white    "wsj.com,wsj-com.20150623.gappssmtp.com";   // some unsigned mail via iphmx.com
+wsfsbank.com                    require_signed  "wsfsbank.com;ptr:bankserv.com";
+wsj.com                         require_signed  "wsj.com,wsj-com.20150623.gappssmtp.com;ptr:iphmx.com";
 wstelecomlaw.com                require_signed  sapronov.onmicrosoft.com;
 wtcphila.org                    require_signed  "wtcphila.onmicrosoft.com,wtcphila.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 wullo.com                       require_signed  wullo.com;
@@ -2894,17 +2905,7 @@
 xks.com                         require_signed  xks.com;
 xlive.tm00.com                  require_signed  tm00.com;
 xode.com                        require_signed  xode.com;
-yahoo.ca                        unsigned_black  yahoo.ca;
-yahoo.co.in                     unsigned_black  yahoo.co.in;
-yahoo.co.jp                     unsigned_black  "yahoo.com,yahoo.co.jp";
-yahoo.com.my                    unsigned_black  yahoo.com.my;
-yahoo.com.tw                    unsigned_black  yahoo.com.tw;
-yahoo.com                       unsigned_black  yahoo.com;
-yahoo.co.uk                     unsigned_black  yahoo.co.uk;
-yahoo.de                        unsigned_black  yahoo.de;
-yahoo.fr                        unsigned_black  yahoo.fr;
 yahoo-inc.com                   require_signed  yahoo-inc.com;                  // password resets, etc
-yahoo.in                        unsigned_black  yahoo.in;
 yellowstone.org                 require_signed  mta-bbcspool.convio.net;
 yelp.com                        require_signed  yelp.com;
 yipit.com                       require_signed  yipit.com;