--- a/ChangeLog	Mon Feb 19 15:25:40 2018 -0800
+++ b/ChangeLog	Mon Feb 19 15:30:00 2018 -0800
@@ -1,3 +1,8 @@
+6.68 2018-02-19
+    round rather than truncate spam assassin scores.
+    check >= rather than > for spam assassin scores to match
+    behavior of dcc bulk scores.
+
 6.67 2018-01-05
     always call dcc code so we get log entries
 

--- a/NEWS	Mon Feb 19 15:25:40 2018 -0800
+++ b/NEWS	Mon Feb 19 15:30:00 2018 -0800
@@ -1,3 +1,4 @@
+6.68 2018-02-19 round spamassassin scores; check >= rather than >
 6.67 2018-01-05 always call dcc code so we get log entries
 6.66 2017-12-07 more changes for long syslog messages
 6.65 2017-11-03 code cleanup

--- a/configure.in	Mon Feb 19 15:25:40 2018 -0800
+++ b/configure.in	Mon Feb 19 15:30:00 2018 -0800
@@ -1,6 +1,6 @@
 
 AC_PREREQ(2.59)
-AC_INIT(dnsbl,6.67,carl@five-ten-sg.com)
+AC_INIT(dnsbl,6.68,carl@five-ten-sg.com)
 AC_CONFIG_SRCDIR([config.h.in])
 AC_CONFIG_HEADER([config.h])
 AC_CONFIG_MACRO_DIR([m4])

--- a/dnsbl.dkim.conf	Mon Feb 19 15:25:40 2018 -0800
+++ b/dnsbl.dkim.conf	Mon Feb 19 15:30:00 2018 -0800
@@ -65,7 +65,7 @@
 adobe.com                       require_signed  "adobe.com,mktomail.com";
 adolescent.nyc                  require_signed  "cmail19.com,cmail20.com";
 adparlor.com                    require_signed  adparlor.com;
-adp.com                         require_signed  "adp.com,*.adp.com";
+adp.com                         require_signed  "adp.com,*.adp.com,rimagede.onmicrosoft.com";
 adrianacurcio.com               require_signed  emlr2.com;
 adroptions.com                  require_signed  adroptions.ccsend.com;
 adr.org                         require_signed  adr.org;
@@ -73,6 +73,7 @@
 advancement.villanova.edu       require_signed  advancement.villanova.edu;
 adviserinvestments.com          require_signed  adviserinvestments.com;
 adv.strawberrynet.com           require_signed  adv.strawberrynet.com;
+a.email.hbr.org                 require_signed  a.email.hbr.org;
 afar.com                        require_signed  afar.com
 aflac-email.com                 require_signed  aflac-email.com;
 aflac-onlineservices.com        require_signed  aflac-onlineservices.com;
@@ -84,8 +85,10 @@
 agfa.com                        require_signed  www-agfa.ccsend.com;
 agingcare.com                   require_signed  agingcare.com;
 agoodson.com                    require_signed  "emlr2.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+a.grubhub.com                   require_signed  a.grubhub.com;
 agu.org                         require_signed  agu.org;
 aiaa.org                        require_signed  aiaa.org;
+aiche.org                       require_signed  aiche.org;
 aiga.org                        require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 airbnb.com                      require_signed  email.airbnb.com;
 airconway.com                   require_signed  airconway.ccsend.com;
@@ -174,6 +177,7 @@
 astc.org                        require_signed  icontactmail3.com;
 astm.org                        signed_white    astm.org;                       // some unsigned mail from their own servers
 astrazeneca.com                 require_signed  azcollaboration.onmicrosoft.com;
+asurion.com                     require_signed  asurion.com;
 atautosbdc.com                  require_signed  sg01.motosnap.com;
 atdcd-media.com                 require_signed  atdcd-media.com;
 athero.org                      require_signed  "*.musvc.com";
@@ -219,7 +223,7 @@
 benrlujan.com                   require_signed  bounce.myngp.com;
 betabrand.com                   require_signed  email.betabrand.com;
 bethany2016.com                 require_signed  bounce.myngp.com;
-bethelinn.com                   require_signed  bounces.fanbridge.com;
+bethelinn.com                   signed_white    bounces.fanbridge.com;          // some unsigned mail from their own servers not listed in their spf record
 betterworldbooks.com            require_signed  mailer.betterworldbooks.com;
 bgeneral.com                    signed_white    bgeneral.com;                   // some unsigned mail via bgeneral.com
 bhfs.com                        signed_white    "bhfs.com,brownsteinhyattfarberschreck.onmicrosoft.com";    // temp errors, 0 bit key
@@ -269,6 +273,7 @@
 bridgemailsystem.com            require_signed  bridgemailsystem.com;
 britemg.com                     require_signed  advertickets.onmicrosoft.com;
 broadcaster3.medpagetoday.com   require_signed  broadcaster3.medpagetoday.com;
+brooklynmuseum.org              require_signed  brooklynmuseum.org;
 brrice.edu                      require_signed  brrice.edu;
 brucebrown.com                  require_signed  emlr2.com;
 brumark.com                     signed_white    exploring.ccsend.com;           // unsigned mail from exploring.com, no spf record
@@ -282,6 +287,7 @@
 burpeenews.com                  require_signed  burpeenews.com;
 business.amazon.com             require_signed  business.amazon.com;
 businessinsider.com             require_signed  businessinsider.com;
+businessmanagementdaily.com     require_signed  businessmanagementdaily.com;
 b.us.underarmour.com            require_signed  "*.underarmour.com";
 buykud.com                      require_signed  buykud.com;
 cadsourcing.com                 require_signed  cadsourcing-com.20150623.gappssmtp.com;
@@ -298,6 +304,7 @@
 capbluecross.com                require_signed  cvent-planner.com;
 capemaymac.org                  require_signed  capemaymac.ccsend.com;
 capitaloneemail.com             require_signed  capitaloneemail.com;
+caratsandcake.com               require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 care.comcast.com                require_signed  care.comcast.com;
 careersinfosecurity.com         require_signed  careersinfosecurity.com;
 caregiveraction.org             require_signed  caregiveraction.org;
@@ -325,7 +332,9 @@
 cdwemail.com                    require_signed  cdwemail.com;
 ceainfo.org                     require_signed  ceainfo.org;
 ce.homeadvisor.com              require_signed  ce.homeadvisor.com;
+celestron.com                   signed_white    celestronllc.onmicrosoft.com;   // unsigned mail invoices that fail spf
 centurylink-business.com        require_signed  centurylink-business.com;
+ceoreport.com                   require_signed  fwbusinesspress.ccsend.com;
 ce.org                          require_signed  ce.org;
 cerner.com                      require_signed  cerner.com;                 // client of mediasupply
 cestrong.com                    require_signed  archpaper.ccsend.com;
@@ -347,6 +356,7 @@
 ciscospark.com                  require_signed  mail-a.ciscospark.com;
 citibank.com                    require_signed  citibank.com;
 citicorp.com                    require_signed  citicorp.com;
+citizensbankonline.com          require_signed  citizensbankonline.com;         // unsigned mail but it passes spf
 citrix.com                      signed_black    qemailserver.com;               // survey spam
 citrixonline.com                require_signed  citrixonline.com;
 citybizlist.com                 require_signed  bsf01.com;
@@ -359,6 +369,7 @@
 classicspecs.com                require_signed  classicspecs.com;
 clddigital.com                  require_signed  cldgraphics.onmicrosoft.com;
 cleanrouter.com                 require_signed  "*.cleanrouter.com";
+cleanwater.org                  require_signed  mail.salsalabs.net;
 clearlaws.com                   require_signed  clearlaws.com;
 click.dandb.com                 require_signed  click.dandb.com;
 clickerdogs.com                 require_signed  clickerdogs.com;
@@ -374,6 +385,7 @@
 cm.zazzle.com                   require_signed  cm.zazzle.com
 cnczone.com                     require_signed  cnczone.com;
 cnn.com                         require_signed  cnn.com;
+coastlinerealty.com             require_signed  coastlinerealty.com;
 cohnreznick.com                 require_signed  cohnreznick.onmicrosoft.com;
 coinbase.com                    require_signed  coinbase.com;
 colocation.com                  require_signed  colocation-com.20150623.gappssmtp.com;
@@ -385,6 +397,7 @@
 com2.smartbidnet.com            require_signed  smartbidnet.com;
 comm2.wellsfargoemail.com       require_signed  comm2.wellsfargoemail.com;
 comms.dyson.com                 require_signed  comms.dyson.com;
+comms.opentable.com             require_signed  comms.opentable.com;
 communication.ibx2.com          require_signed  communication.ibx2.com;
 communication.ruelala.com       require_signed  communication.ruelala.com;
 communications.meredith.com     require_signed  communications.meredith.com;
@@ -401,6 +414,7 @@
 consigli.com                    require_signed  "consigli.com,consiglico.onmicrosoft.com";
 contact.britishairways.com      require_signed  bounce.ba.com;
 contact-client.com              require_signed  contact-client.com;
+contactpigeon.com               require_signed  contactpigeon.com;
 contractimprint.com             require_signed  criticalimpactinc.com;
 cookwoods.com                   require_signed  cookwoods.ccsend.com;
 cooperhealth.org                require_signed  cooperhealth.org;
@@ -451,6 +465,7 @@
 dailydeals.snoothmail.com       require_signed  mg.snoothmail.com;
 dailykos.com                    require_signed  sg.actionnetwork.org;
 dailyleak.club                  require_signed  dailyleak.club;
+daily.ozy.com                   require_signed  daily.ozy.com;
 dandh.com                       signed_white    email.clickdimensions.com;      // unsigned mail from their own servers with no spf
 darkironfitness.com             signed_white    aweber.com;                     // some broken signatures from aweber that fail spf
 dasd.org                        signed_white    "bbnotify.net,infosnap.com";    // some unsigned mail via bbnotify
@@ -458,6 +473,7 @@
 davidfrancisfurniture.com       require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 davidsuzuki.org                 require_signed  davidsuzuki.org;
 davios.com                      require_signed  www-davios.ccsend.com;
+dayrunner.com                   require_signed  dayrunner.com;
 dayspring.com                   require_signed  dayspring.com;
 daytimer.com                    require_signed  daytimer.com;
 dcmkt.com                       require_signed  dcmkt.com;
@@ -471,10 +487,12 @@
 deluxe.com                      signed_white    deluxe.onmicrosoft.com;         // spf says also from mktomail and qualtrics
 demandforced3.com               require_signed  demandforced3.com;
 demandprogress.org              require_signed  demandprogress.org;
+democraticags.org               require_signed  bounce.bluestatedigital.com;
 democrats.org                   require_signed  democrats.org;
 depaceminterris.org             signed_white    icontactmail4.com;              // some unsigned mail arriving from comcast servers
 dep.nj.gov                      require_signed  sonj.onmicrosoft.com;
 designandconstructionweek.com   require_signed  designandconstructionweek.com;
+designbandb.com                 require_signed  designbandb-com.20150623.gappssmtp.com;
 designerpages.com               require_signed  designerpages.com;
 detroitjazzfest.org             require_signed  detroitjazzfest.ccsend.com;
 dhl.com                         require_signed  dhl.com;
@@ -492,9 +510,11 @@
 directoryofillustration.com     require_signed  directoryofillustration.com;
 directvote.net                  require_signed  smtpsendmail.com;
 discogs.com                     require_signed  discogs.com;
+discountschoolsupply.com        require_signed  discountschoolsupply.com;
 discoverphl.com                 require_signed  discoverphl.com;
 discover.zinio.com              require_signed  discover.zinio.com;
 dishemail.com                   require_signed  dishemail.com;
+ditech-notify.com               require_signed  ditech-notify.com;
 divenewsletter.com              require_signed  divenewsletter.com;
 diversityagenda.com             require_signed  theconferencecenter.ccsend.com;
 djmarks.com                     require_signed  djmarks.ccsend.com;
@@ -505,6 +525,7 @@
 dnc.com                         require_signed  dnc.com;
 dnc.org                         require_signed  dnc.org;
 doa.nc.gov                      require_signed  doa.nc.gov;
+docusign.com                    require_signed  docusign.com;
 doelegal.com                    require_signed  doelegal.com;
 dogseminarsdirectory.com        require_signed  doggiemanners.ccsend.com;
 dola.com                        require_signed  "dola.com,dola-com.20150623.gappssmtp.com";
@@ -516,7 +537,8 @@
 dor.state.ma.us                 signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 dpreview.com                    require_signed  dpreview.com;
 dreamstime.com                  require_signed  dreamstime.com;
-drexel.edu                      require_signed  "drexel0.onmicrosoft.com,imodules.com";
+drexel.edu                      require_signed  "drexel0.onmicrosoft.com,www-drexel.ccsend.com,imodules.com";
+drfmail.com                     require_signed  drfmail.com;
 drobo.com                       require_signed  drobo.com;
 dropbox.com                     require_signed  dropbox.com;
 dropboxmail.com                 require_signed  dropboxmail.com;
@@ -542,7 +564,7 @@
 ealert.nature.com               require_signed  ealert.nature.com;
 ealerts.bankofamerica.com       require_signed  ealerts.bankofamerica.com;
 e.allrecipes.com                require_signed  e.allrecipes.com;
-ealogistics.com                 require_signed  ealogistics1.onmicrosoft.com;
+ealogistics.com                 require_signed  "ealogistics1.onmicrosoft.com,ealogistics.ccsend.com";
 e.appleseeds.com                require_signed  e.appleseeds.com;
 eastsideco.com                  require_signed  eastsideco.com;
 eastwood.com                    require_signed  eastwood.com;
@@ -551,6 +573,7 @@
 eat24.com                       require_signed  eat24.com;
 e.att-mail.com                  require_signed  e.att-mail.com;
 e.avis.com                      require_signed  e.avis.com;
+e.barenecessities.com           require_signed  e.barenecessities.com;
 e.basbleu.com                   require_signed  e.basbleu.com;
 ebay.com                        require_signed  ebay.com;
 e.berries.com                   require_signed  e.berries.com;
@@ -593,6 +616,7 @@
 e.economist.com                 require_signed  e.economist.com;
 e.eddiebauer.com                require_signed  e.eddiebauer.com;
 e.eharmony.com                  require_signed  e.eharmony.com;
+e.elfcosmetics.com              require_signed  e.elfcosmetics.com;
 e.empiretodaynews.com           require_signed  e.empiretodaynews.com;
 e.esteelauder.com               require_signed  e.esteelauder.com;
 e.etsy.com                      require_signed  e.etsy.com;
@@ -615,6 +639,7 @@
 e.grubhub.com                   require_signed  e.grubhub.com;
 e.healthandwellnessalerts.berkeley.edu require_signed  e.healthandwellnessalerts.berkeley.edu;
 e.highlights.com                require_signed  e.highlights.com;
+e.homechef.com                  require_signed  e.homechef.com;
 e.hotwire.com                   require_signed  e.hotwire.com;
 e.hyatt.com                     require_signed  e.hyatt.com;
 eightcoupons.com                require_signed  eightcoupons.com;
@@ -666,6 +691,7 @@
 email.americangreetings.com     require_signed  email.americangreetings.com;
 e-mail.amtrak.com               require_signed  e-mail.amtrak.com;
 email.ancestry.com              require_signed  email.ancestry.com;
+email.anthem.com                require_signed  email.anthem.com;
 email.apple.com                 require_signed  email.apple.com;
 email.athleta.com               require_signed  email.athleta.com;
 email.b0.monster.com            require_signed  email.b0.monster.com;
@@ -683,6 +709,7 @@
 email.cbssports.com             require_signed  email.cbssports.com;
 email.chase.com                 require_signed  email.chase.com;
 email.cheaptickets.com          require_signed  email.cheaptickets.com;
+email.chop.edu                  require_signed  email.chop.edu;
 emailchristmastreeshops.com     require_signed  emailchristmastreeshops.com;
 email.coldwatercreek.com        require_signed  coldwatercreek.com;
 emailcoldwatercreek.com         require_signed  emailcoldwatercreek.com;
@@ -695,11 +722,12 @@
 email.cort.com                  require_signed  email.cort.com;
 email.cruisecritic.com          require_signed  email.cruisecritic.com;
 email.cynopsis.com              signed_white    email.cynopsis.com;             // some unsigned from their own servers that fails spf
+email.deadline.com              require_signed  email.deadline.com;
 email.digg.com                  require_signed  email.digg.com;
 email.directnic.com             require_signed  directnic.com;
 email.disneycruiseline.com      require_signed  email.disneycruiseline.com;
 email.diynetwork.com            require_signed  email.diynetwork.com;
-emaildl.att-mail.com            require_signed  emaildl.att-mail.com;
+emaildl.att-mail.com            signed_white    emaildl.att-mail.com;           // some unsigned
 email.dowjones.com              require_signed  email.dowjones.com;
 email-dressbarn.com             require_signed  email-dressbarn.com;
 email.ed2go.com                 require_signed  email.ed2go.com;
@@ -714,7 +742,7 @@
 email.familyvacationcritic.com  require_signed  email.familyvacationcritic.com;
 email.famousfootwear.com        require_signed  email.famousfootwear.com;
 email.fathead.com               require_signed  email.fathead.com;
-emailff.att-mail.com            require_signed  emailff.att-mail.com;
+emailff.att-mail.com            signed_white    emailff.att-mail.com;           // some unsigned
 email.foliomag.com              require_signed  email.foliomag.com;
 email.foodandwine.com           require_signed  email.foodandwine.com;
 email.food.com                  require_signed  email.food.com;
@@ -758,6 +786,7 @@
 email-lifetouch.com             require_signed  email-lifetouch.com;
 email.livenation.com            require_signed  email.livenation.com;
 email.livestrong.com            require_signed  livestrong.com;
+email-marriott.com              require_signed  email-marriott.com;
 email.microsoftonline.com       require_signed  email.microsoftonline.com;
 email.microsoftrewards.com      require_signed  email.microsoftrewards.com;
 email-modells.com               require_signed  "bounceexchange.com,email-modells.com";
@@ -813,6 +842,7 @@
 emails.directbuy.com            require_signed  emails.directbuy.com;
 email.secretescapes.com         require_signed  email.secretescapes.com;
 emails.evernote.com             require_signed  emails.evernote.com;
+emails.flyfrontier.com          require_signed  emails.flyfrontier.com;
 email.sheetmusicplus.com        require_signed  email.sheetmusicplus.com;
 emails.hertz.com                require_signed  emails.hertz.com;
 e-mail.shoecarnival.com         require_signed  e-mail.shoecarnival.com;
@@ -824,6 +854,7 @@
 emails.nwruk.com                require_signed  emails.nwruk.com;
 email.sonyentertainmentnetwork.com require_signed  email.sonyentertainmentnetwork.com;
 emails.pitneybowes.com          require_signed  emails.pitneybowes.com;
+email.sportsline.com            require_signed  email.sportsline.com;
 emails.rakuten.com              require_signed  emails.rakuten.com;
 emails.schwans.com              require_signed  emails.schwans.com;
 emails.snapfish.com             require_signed  emails.snapfish.com;
@@ -866,9 +897,11 @@
 emailworldmarket.com            require_signed  emailworldmarket.com;
 email.wsfsbank.com              require_signed  email.wsfsbank.com;
 email.wyndhamvo.com             require_signed  email.wyndhamvo.com;
+email.ydmailer.com              require_signed  email.yodle.com;
 email.zappos.com                require_signed  email.zappos.com;
 email.zazzle.com                require_signed  zazzle.com;
 email.zionlodge.com             require_signed  email.zionlodge.com;
+em.apartmentlist.com            require_signed  apartmentlist.com;
 emarketing.sixers.com           require_signed  emarketing.sixers.com;
 e-marriott.com                  require_signed  e-marriott.com;
 e.mars.com                      require_signed  mail.fagms.de;
@@ -877,6 +910,7 @@
 embarqcreative.com              require_signed  embarqcreative.com;
 em.bbt.com                      require_signed  em.bbt.com;
 em.bloomstoday.com              require_signed  em.bloomstoday.com;
+embryriddleundergraduate.org    require_signed  embryriddleundergraduate.org;
 em.citizensbank.com             require_signed  em.citizensbank.com;
 em.dgcatalog.net                require_signed  em.dgcatalog.net;
 em.drugstorenews.com            require_signed  em.drugstorenews.com;
@@ -885,6 +919,7 @@
 emessage.njezpass.net           require_signed  amazonses.com;
 e.metlifeyourlife.com           require_signed  e.metlifeyourlife.com;
 e.metmuseum.org                 require_signed  e.metmuseum.org;
+em.express.com                  require_signed  em.express.com;
 em.ftd.com                      require_signed  em.ftd.com;
 em.hollandamerica.com           require_signed  em.hollandamerica.com;
 e.micromark.com                 require_signed  e.micromark.com;
@@ -898,7 +933,7 @@
 em.mgmnationalharbor.com        require_signed  em.mgmnationalharbor.com;
 em.mgmresorts.com               require_signed  em.mgmresorts.com;
 em.newyorknewyork.com           require_signed  em.newyorknewyork.com;
-em.nordstrom.com                require_signed  em.nordstrom.com;
+em.nordstrom.com                require_signed  "em.nordstrom.com,nordstrom.com";
 em.omnihotels.com               require_signed  em.omnihotels.com;
 e.montblanc.com                 require_signed  e.montblanc.com;
 e.mozilla.org                   require_signed  e.mozilla.org;
@@ -933,10 +968,12 @@
 engagebycell.com                require_signed  engagebycell.com;
 e.njadvancemedia.com            require_signed  e.njadvancemedia.com;
 e.nm.com                        require_signed  e.nm.com;
+en.nydailynews.com              require_signed  en.nydailynews.com;
 e.nordstromrack.com             require_signed  e.nordstromrack.com;
 e.normthompson.com              require_signed  e.normthompson.com;
 entercom.com                    signed_white    entercom.com;                   // unsigned mail from their own mail servers, not listed in their spf record
 e.officedepot.com               require_signed  e.officedepot.com;
+e.online.att-mail.com           require_signed  e.online.att-mail.com;
 eonline.e-vanguard.com          require_signed  e-vanguard.com;
 e.opensky.com                   require_signed  e.opensky.com;
 e.orbitzrewards.com             require_signed  e.orbitzrewards.com;
@@ -949,8 +986,10 @@
 e.progressive.com               require_signed  e.progressive.com;
 e.proplants.com                 require_signed  e.proplants.com;
 equalexchange.coop              require_signed  equalexchange.coop;
+e.quill.com                     require_signed  e.quill.com;
 e.ralphlauren.com               require_signed  e.ralphlauren.com;
 e.readyrefresh.com              require_signed  e.readyrefresh.com;
+e.redbubble.com                 require_signed  e.redbubble.com;
 e.restorationhardware.com       require_signed  e.restorationhardware.com;
 e.revolutiongolf.com            require_signed  e.revolutiongolf.com;
 e-rewards.com                   require_signed  e-rewards.com;
@@ -960,6 +999,7 @@
 esca.org                        require_signed  esca.ccsend.com;
 e.showmanagement.com            require_signed  e.showmanagement.com;
 e.shutterfly.com                require_signed  e.shutterfly.com;
+e.siriusxm.com                  require_signed  e.siriusxm.com;
 e-skillpath.com                 require_signed  e-skillpath.com;
 e.smilereminder.com             require_signed  smilereminder.com;
 e.snowbasin.com                 require_signed  e.snowbasin.com;                // needs spf, 200608._domainkey.e.snowbasin.com record not found
@@ -1010,21 +1050,23 @@
 ewomennetwork.com               signed_white    ewomennetwork.com;
 e.woolovers.com                 require_signed  e.woolovers.com;
 exacttarget.change.org          require_signed  exacttarget.change.org;
-examine.com                     require_signed  ck.examine.com;
+examine.com                     require_signed  "ck.examine.com,smtp.groovehq.com";
 exchange.calstatela.edu         require_signed  csula.onmicrosoft.com;
 exhibitoronline.co              require_signed  exhibitoronline.co;
 exlevents.com                   require_signed  exlevents.com;
+expediamail.com                 require_signed  mg.expediamail.com;
 explore.oceaniacruises.com      require_signed  explore.oceaniacruises.com;
 explore.pinterest.com           require_signed  explore.pinterest.com;
 explore.thenorthface.com        require_signed  explore.thenorthface.com;
 expolinc.us                     signed_white    expolinc.ccsend.com;            // some unsigned mail from their outbound servers, no spf record
-exponation.net                  require_signed  "auth.ccsend.com,icontactmail1.com";
+exponation.net                  require_signed  "exponation-net.20150623.gappssmtp.com,auth.ccsend.com,icontactmail1.com";
 extracare.cvs.com               require_signed  extracare.cvs.com;
 exworkscapital.com              signed_white    198.memberemail.com;            // some unsigned mail via exacttarget, might be spam
 eystudios.com                   require_signed  eystudios.ccsend.com;
 e.zulily.com                    require_signed  e.zulily.com;
 ezup.com                        signed_white    "ezup.com,ezup.onmicrosoft.com";    // some other unsigned mail via quotevalet.com
 facebookmail.com                require_signed  facebookmail.com;
+failsafeinc.com                 require_signed  icontactmail6.com;
 fairmontemailcommunications.com require_signed  "fairmontemailcommunications.com,cmail19.com,cmail20.com";
 falconfinancialservices.net     require_signed  spsend.com;
 familybase.vzw.com              require_signed  email.familybase.vzw.com;
@@ -1052,6 +1094,7 @@
 firecracker10k.org              require_signed  icontactmail4.com;
 fire-design.fr                  require_signed  newsletter.fire-design.fr;
 firefox.com                     require_signed  firefox.com;
+firstam.com                     require_signed  firstam.com;
 firstleaf.club                  require_signed  firstleaf.club;
 fisherunitech.com               require_signed  fisherunitech.com;
 fitbit.com                      require_signed  email.fitbit.com
@@ -1073,6 +1116,7 @@
 followmyhealth.com              require_signed  email.followmyhealth.com;
 fontexplorerx.com               signed_white    email.monotype.com;             // some unsigned mail from salesforce
 foolsubs.com                    require_signed  foolsubs.com;
+footballcamps.com               require_signed  footballcamps.com;
 footsolutions.com               require_signed  footsolutions.com;
 foreseeresults.com              require_signed  4cresults.com;
 foreupsoftware.com              require_signed  foreupsoftware.com;
@@ -1101,7 +1145,7 @@
 genghisgrill.com                require_signed  "pxsmail.com,khansklub.pxsmail.com";
 geocaching.com                  require_signed  geocaching.com;
 gershmany.org                   signed_white    mail196.atl61.mcsv.net;
-gerstmangroup.com               require_signed  questservicegroup.ccsend.com;
+gerstmangroup.com               require_signed  "auth.ccsend.com,questservicegroup.ccsend.com";
 ges.com                         signed_white    "ges.com,viadcorp.onmicrosoft.com";
 getjibjab.com                   require_signed  getjibjab.com;
 gge4mailer.com                  signed_white    email.gge4mailer.com;
@@ -1111,6 +1155,7 @@
 girlscoutsla.org                require_signed  girlscoutsla.org;
 glassdoor.com                   require_signed  glassdoor.com;
 glassesusa.com                  require_signed  bronto.com;
+globalfinancegroup.com          require_signed  globalfinancegroup-com.20150623.gappssmtp.com;
 globalmasstransit.net           require_signed  cvent-planner.com;
 go.coachup.com                  require_signed  go.coachup.com;
 godaddy.com                     require_signed  godaddy.com;
@@ -1121,8 +1166,10 @@
 gokhalemethod.com               require_signed  gokhalemethod.com;
 google.com                      require_signed  google.com;
 googlemail.com                  require_signed  googlemail.com;
+goop.com                        require_signed  goop.com;
 gopac.org                       signed_black    icontactmail1.com;              // survey spam
 gophercentral.com               require_signed  gophercentral.com;
+gordoncompaniesinc.com          require_signed  gordoncompaniesinc.com;
 goto.arcadiapublishing.com      require_signed  goto.arcadiapublishing.com;
 gotowebinar.com                 require_signed  gotowebinar.com;
 govbrief.us                     require_signed  govbrief.us;
@@ -1134,8 +1181,10 @@
 graphiccommunications.us        require_signed  graphiccommunications.onmicrosoft.com;
 graphisoft.com                  require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 greatebay.com                   require_signed  sendclubmail.com;
+greaterthanone.com              require_signed  greaterthanone.onmicrosoft.com;
 greatist.com                    require_signed  greatist.com;
 greenbiz.com                    require_signed  greenbiz.com;
+greenbuildingunited.org         require_signed  dvgbc365.onmicrosoft.com;
 greenforall.org                 require_signed  greenforall.org;
 greenpasture.org                require_signed  greenpasture.org;
 greenphillyblog.com             require_signed  "gmail.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
@@ -1166,7 +1215,8 @@
 hardywindows.com                require_signed  hardywindows.onmicrosoft.com;
 harley-davidson.rsys2.com       require_signed  rsys2.com;
 harryanddavid-email.com         require_signed  harryanddavid-email.com;
-harting.com                     require_signed  mktroute.com;
+hartfordadmission.org           require_signed  hartfordadmission.org;
+harting.com                     require_signed  "mktroute.com,mktomail.com";
 harvestapp.com                  require_signed  harvestapp.com;
 harvestseasonalgrill.com        require_signed  "getvenga.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 hauptwerk.com                   require_signed  hauptwerk.com;
@@ -1213,6 +1263,7 @@
 houseofgeoscience.org           require_signed  "sendgrid.info,mailplus.nl";
 houzz.com                       require_signed  houzz.com;
 hq.acm.org                      require_signed  acmhq.onmicrosoft.com;
+hsbc.com                        require_signed  hsbc.com;
 htallc.com                      require_signed  "smtpsendmail.com,smtp.com";
 hubs.com                        require_signed  hubs.com;
 hulumail.com                    require_signed  hulumail.com;
@@ -1232,9 +1283,11 @@
 ientry.info                     require_signed  ientry.net;
 ifixit.com                      require_signed  ifixit.com;
 ifly.alaskaair.com              require_signed  ifly.alaskaair.com;
+ifm.com                         require_signed  ifm.com;
 ift.org                         signed_white    "connect.ift.org,ift1.onmicrosoft.com"; // broken sigs from connect.ift.org
 iheartmedia.com                 signed_white    iheartmedia.onmicrosoft.com;
 iiw.org                         require_signed  iiw.org;
+ijr.com                         require_signed  ijr.com;
 imail.register.com              require_signed  imail.register.com;
 imdb.com                        require_signed  imdb.com;
 imprintprojects.com             require_signed  imprintprojects.com;
@@ -1259,15 +1312,19 @@
 info.prioritypass.com           require_signed  info.prioritypass.com;
 information.nature.com          require_signed  information.nature.com;
 info.stagnitomedia.com          require_signed  stagnito.cfmvmail.com;
-ingrammicro.com                 require_signed  "leadflight.net,pb-dynmktg.com";
+ingrammicro.com                 signed_white    "leadflight.net,pb-dynmktg.com";    // unsigned mail via pphosted, no spf record
 inhousejobalert.com             require_signed  inhousejobalert.com;
 inhousejobsalerts.com           require_signed  inhousejobsalerts.com;
+inklings.biz                    require_signed  inklings.biz;
 inlandgroup.com                 require_signed  inlandgroup.com;
 inmarket.com                    require_signed  "inmarket.com,*.hubspotemail.net";
+innovive.com                    require_signed  innovive-com.20150623.gappssmtp.com;
 insideapple.apple.com           require_signed  insideapple.apple.com;
 insideradio.com                 require_signed  e2ma.net;
 inspire.pinterest.com           require_signed  inspire.pinterest.com;
 inspireschools.org              require_signed  inspireschools-org.20150623.gappssmtp.com;
+instamed.com                    require_signed  instamed.com;
+instoreaudionetwork.com         require_signed  instoreaudio.onmicrosoft.com;
 insurance.thehartford.com       require_signed  insurance.thehartford.com;
 intacct.com                     require_signed  intacct.com;
 interactone.com                 require_signed  "mx-senderer-02.com,mx-senderer-03.com";
@@ -1288,7 +1345,9 @@
 issuumail.com                   require_signed  issuumail.com;
 ithirings.com                   require_signed  messaging-master.net;
 iupdate.dnb.com                 require_signed  dnb.com;
+ixactcontact.com                require_signed  ixactcontact.com;
 jackseeds.com                   require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+jackthreads.com                 require_signed  jackthreads.com;
 jacpac.org                      require_signed  jacpac.ccsend.com;
 jakprints.com                   require_signed  "jakprints.com,jakprints-com.20150623";
 jameco.com                      require_signed  jameco.com;
@@ -1301,7 +1360,7 @@
 jewelscent.com                  require_signed  delivery.klaviyomail.com;
 jewishphilly.org                require_signed  "aweber.com,auth.ccsend.com,jewishphilly.ccsend.com,jewishphilly-org.20150623.gappssmtp.com";
 jhu.edu                         signed_white    "e2ma.net,publicaster.com,bsftransmit7.com,armssoftware.com";     // possibly other signers
-jibjab.com                      require_signed  jibjab.com;
+jibjab.com                      require_signed  "jibjab.com,recurly.com";
 jimjohnson4governor.com         require_signed  bounce.bluestatedigital.com;
 jkj.com                         require_signed  "jkj.com,jkji.onmicrosoft.com";
 job.alerted.org                 require_signed  job.alerted.org;
@@ -1324,6 +1383,7 @@
 kantar.com                      require_signed  "ktglbuc.onmicrosoft.com,icontactmail6.com";
 kantarmedia.com                 require_signed  "kantarmedia.com,ktglbuc.onmicrosoft.com,icontactmail3.com,icontactmail6.com";
 katiemcginty.com                require_signed  bounce.myngp.com;
+katzmedia.com                   require_signed  "iheartmedia.onmicrosoft.com,clearchannel.com,iheartmedia.com";
 kaydaly.com                     require_signed  "kaydaly.com,bluehornet.com";
 kbkg.net                        require_signed  kbkg.net;
 kcrw.org                        signed_white    "kcrw-org.20150623.gappssmtp.com,*.hubspot.com";    // unsigned from traffic@
@@ -1335,6 +1395,8 @@
 kftv.com                        require_signed  kftv.com;
 kik.com                         require_signed  action.kik.com;
 kingarthurflour.com             require_signed  kingarthurflour.com;
+kingscollegeinfo.org            require_signed  kingscollegeinfo.org;
+kmnewsletters.com               require_signed  kmnewsletters.com;
 knoll.com                       require_signed  knoll.com;
 knotandrope.com                 require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 knowledge.onlinecompliancepanel.net require_signed  knowledge.onlinecompliancepanel.net;
@@ -1353,6 +1415,7 @@
 laopera.org                     require_signed  "laopera.org,laopera.onmicrosoft.com";
 largeformatreview.com           require_signed  "amazonses.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 larryjohnsonspeaker.com         require_signed  priorityoneemail.com;
+latest.newsmax.com              require_signed  latest.newsmax.com;
 latinworks.com                  require_signed  latinworks.onmicrosoft.com;
 law360.com                      require_signed  "law360.com,mailings-alt.law360.com";
 lawline.com                     require_signed  icontactmail1.com;
@@ -1362,6 +1425,7 @@
 lazorlaw.com                    require_signed  johnlazor.onmicrosoft.com;
 lbccc.org                       require_signed  "lbccc.ccsend.com,www-lbccc.ccsend.com";
 lcius.com                       require_signed  lcius.onmicrosoft.com;
+leapinglizardssmyrna.com        require_signed  em.secureserver.net;
 ledbury.com                     require_signed  ledbury.com;
 ledgerwallet.com                require_signed  smtp.groovehq.com;
 leerburg.com                    require_signed  amazonses.com;
@@ -1392,9 +1456,10 @@
 listedby.com                    require_signed  listedby.com;
 listeneremail.net               require_signed  listeneremail.net;
 list.moveon.org                 require_signed  "list.moveon.org,moveon.org";
+lists.trialsmith.com            require_signed  lists.trialsmith.com            // unsigned mail but it passes spf
 littsquality.com                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 liveperson.com                  require_signed  liveperson.com;
-llbgroup.com                    require_signed  llbgrouptechsolutions.onmicrosoft.com;
+llbgroup.com                    require_signed  "llbgroup.com,llbgrouptechsolutions.onmicrosoft.com";
 llnl.gov                        require_signed  doellnl.onmicrosoft.com;
 loanservicing.bankofamerica.com require_signed  loanservicing.bankofamerica.com;
 localjobservice.com             require_signed  localjobservice.com;
@@ -1404,6 +1469,7 @@
 longbeachhonda.com              require_signed  "xtime.com,dealersocket.com";
 loseit.com                      require_signed  loseit.com;
 lovethe88.com                   require_signed  lovethe88-com.20150623.gappssmtp.com;
+loweekly.com                    require_signed  loweekly.com;
 loyaltyalliance.com             require_signed  "loyaltyalliance.com,mx-senderer-02.com,mx-senderer-03.com";
 loyalty.bloomingdales.com       require_signed  loyalty.bloomingdales.com;
 lpl.com                         require_signed  lpl.com;
@@ -1435,6 +1501,7 @@
 mail.authorize.net              require_signed  mail.authorize.net;
 mail.barnesandnoble.com         require_signed  mail.barnesandnoble.com;
 mail.bloombergbusiness.com      require_signed  mail.bloombergbusiness.com;
+mail.bouqs.com                  require_signed  mail.bouqs.com;
 mail.brylanehome.com            require_signed  mail.brylanehome.com;
 mailcenter.usaa.com             require_signed  usaa.com;
 mail.change.org                 require_signed  mail.change.org;
@@ -1449,6 +1516,7 @@
 mail.etsy.com                   require_signed  mail.etsy.com;
 mail.eviteideas.com             require_signed  mail.eviteideas.com;
 mail.farmers.com                require_signed  mail.farmers.com;
+mail.feeln.com                  require_signed  mail.feeln.com;
 mail.fidelity.com               require_signed  mail.fidelity.com;
 mail.glassdoor.com              require_signed  mail.glassdoor.com;
 mail.goodreads.com              require_signed  goodreads.com;
@@ -1506,6 +1574,7 @@
 marketing.qdoba.com             require_signed  marketing.qdoba.com;
 marketplace.amazon.ca           require_signed  amazon.ca;
 marketplace.amazon.com          require_signed  amazon.com;
+marquiscapemay.com              require_signed  marquiscapemay.onmicrosoft.com;
 martindalemail.com              require_signed  martindalemail.com;
 martindalenolo.com              require_signed  "martindalenolo.com,lawyers.com";
 marymorrissey.com               require_signed  marymorrissey.com;
@@ -1522,6 +1591,7 @@
 meainfo.org                     require_signed  meainfo.org;
 media-blasters.com              require_signed  media-blasters-com.20150623.gappssmtp.com;
 mediabrains.com                 require_signed  mediabrains.com;
+mediaexperts.com                require_signed  mediaexpert.onmicrosoft.com;
 media.ieee.org                  require_signed  media.ieee.org;
 medium.com                      require_signed  medium.com;
 medjet.com                      require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
@@ -1533,6 +1603,7 @@
 members.angieslist.com          require_signed  members.angieslist.com;
 members.birchlane.com           require_signed  members.birchlane.com;
 members.collegexpress.com       require_signed  members.collegexpress.com;
+memberservices.latimes.com      require_signed  memberservices.latimes.com;
 members.jossandmain.com         require_signed  members.jossandmain.com;
 members.privatecolleges.com     require_signed  members.privatecolleges.com;
 member.starwoodhotelsemail.com  require_signed  member.starwoodhotelsemail.com;
@@ -1541,6 +1612,7 @@
 mentor-protege.net              require_signed  1pointemail.net;
 meraki.net                      require_signed  meraki.net;
 meredith.com                    require_signed  meredith.com;
+merrickbank.com                 require_signed  smtpsendmail.com;
 message.bbt.com                 require_signed  message.bbt.com;
 message.fedex.com               require_signed  message.fedex.com;
 message.merrilledge.com         require_signed  message.merrilledge.com;
@@ -1581,9 +1653,11 @@
 mlivenyc.com                    require_signed  cvent-planner.com;
 m.mail.coursera.org             require_signed  m.mail.coursera.org;
 mmsonline.com                   require_signed  mmsonline.com;
+mms-updates.com                 require_signed  mms-updates.com;
 mobileair.com                   require_signed  tiogahvac.onmicrosoft.com;
 mobiletechinc.com               require_signed  mobiletechinc.onmicrosoft.com;
 mobivity.com                    require_signed  mobivity.com;
+mobvious.media                  require_signed  mobvious.media;
 modernmsg.com                   require_signed  "modernmsg.com,delivery.customeriomail.com";
 moes.com                        require_signed  email.punchh.com;
 momentumdash.com                require_signed  momentumdash.com;
@@ -1606,6 +1680,7 @@
 mp.fitbit.com                   require_signed  mp.fitbit.com;
 mpma.net                        require_signed  mpma.ccsend.com;
 mrca.org                        require_signed  "smtpsendmail.com,smtp.com";
+mrrainbowcarpet.com             require_signed  yahoo.com;
 mrtireservice.info              require_signed  mrtireservice.info;
 mrtireservices.com              require_signed  "mrtireservices.com,mrtireservice.info";
 ms5.matildajaneclothing.com     require_signed  ms5.matildajaneclothing.com;
@@ -1647,7 +1722,7 @@
 narvar.com                      require_signed  narvar.com;
 nationalgunrights.org           require_signed  nationalgunrights.org;
 nationallawfoundation.com       require_signed  nationallawfoundation.com;
-nationformarriage.org           require_signed  nationformarriage.org;          // needs spf for wrong keys from bluehornet
+nationformarriage.org           require_signed  "nationformarriage.org,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";          // needs spf for wrong keys from bluehornet
 natlmail.com                    require_signed  nationalmailmarketing.onmicrosoft.com;
 naturalinsight.com              signed_white    naturalinsight.onmicrosoft.com; // some unsigned mail from salesforce
 nature.org                      require_signed  "nature.org,mta-bbcspool.convio.net";
@@ -1691,6 +1766,7 @@
 newsletter.selectquote.com      require_signed  newsletter.selectquote.com;
 newsletter.springer.com         require_signed  newsletter.springer.com;
 newsletter.tinder.com           require_signed  newsletter.tinder.com;
+news.modernmedicine.com         require_signed  news.modernmedicine.com;
 news.monoprice.com              require_signed  news.monoprice.com;
 news.moo.com                    require_signed  news.moo.com;
 news.pcm.com                    require_signed  news.pcm.com;
@@ -1698,6 +1774,7 @@
 news-rodalesorganiclife.com     require_signed  news-rodalesorganiclife.com;
 news.shiftdailynews.com         require_signed  news.shiftdailynews.com;
 news.southcommmail.com          require_signed  news.southcommmail.com;         // needs spf for broken signatures
+news.subaru.com                 require_signed  news.subaru.com;
 news.tinyprints.com             require_signed  news.tinyprints.com;
 news.united.com                 require_signed  news.united.com;
 news.weddingpaperdivas.com      require_signed  news.weddingpaperdivas.com;
@@ -1732,6 +1809,7 @@
 notifications.intuit.com        require_signed  notifications.intuit.com;
 notifications.pinterest.com     require_signed  notifications.pinterest.com;
 notifications.wm.com            require_signed  notifications.wm.com;
+notify.email.aa.com             require_signed  notify.email.aa.com;
 notify.meetmemail.com           require_signed  notify.meetmemail.com;
 notify.transunion.com           require_signed  notify.transunion.com;
 novitex.com                     require_signed  pbmsnovitex.onmicrosoft.com;
@@ -1742,12 +1820,14 @@
 ntlpartner.com                  require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 nvie.nevada.edu                 require_signed  nevadaie.ccsend.com;
 nyiad.edu                       require_signed  icontactmail1.com;
-nytimes.com                     require_signed  nytimes.com;
+nytimes.com                     signed_white    "nytimes.com,nytimes-com.20150623.gappssmtp.com";   // some unsigned mail via navisite.net not listed in their spf record
 oaktreecapital.com              require_signed  oaktreecapital.com;
 oakwoodveneer.com               require_signed  em.secureserver.net;
+oath.com                        require_signed  oath.com;
 ocusoft.com                     require_signed  "cmail19.com,cmail20.com";
 ocwen.com                       require_signed  ocwen.com;
 o.delta.com                     require_signed  o.delta.com;
+oes.bloomingdales.com           require_signed  oes.bloomingdales.com;
 oes.macys.com                   require_signed  oes.macys.com;
 oe.target.com                   require_signed  oe.target.com;
 ofakind.com                     require_signed  ofakind.com;
@@ -1797,15 +1877,17 @@
 ourrevolution.com               require_signed  ourrevolution.com;
 ourtime.com                     require_signed  ourtime.com;
 outdoorfest.com                 require_signed  outdoorfest.com;
-outfrontmedia.com               require_signed  cbsoa.onmicrosoft.com;
+outfrontmedia.com               require_signed  "cbsoa.onmicrosoft.com,auth.ccsend.com";
 outsiderclub.com                require_signed  "outsiderclub.com,bluehornet.com";
 outsource.com                   require_signed  outsource.com;
 overnightkitchens.com           require_signed  overnightkitchens.com;
 overstock.com                   require_signed  overstock.com;
 ownerreminders.com              require_signed  ownerreminders.com;
+oyrtbetham.org                  require_signed  oyrtbetham.onmicrosoft.com;
 p66.com                         require_signed  p66.com;
 pac-cap.com                     require_signed  thelakearrowheadvillage.ccsend.com;
 pacific.edu                     require_signed  "imodules.com,bluehornet.com";
+pacificmachinetools.com         require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 pacmail.em.marketinghq.net      require_signed  pacmail.em.marketinghq.net;
 paintingwithatwist.com          require_signed  paintingwithatwist-com.20150623.gappssmtp.com;
 paintsquare.com                 require_signed  paintsquare.com;
@@ -1824,6 +1906,7 @@
 partsgeek.com                   require_signed  "smtpserver.email,smtpsendmail.com,partsgeek.ccsend.com";
 pasadenaindependent.com         require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 pasadenarose.com                require_signed  "pasadenarose-com.20150623.gappssmtp.com,pasadenamonthly.ccsend.com";
+passyunk.org                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 pastorrick.com                  require_signed  bluehornet.com;
 patientconnect365.com           require_signed  patientconnect365.com;
 patients.pgsurveying.com        require_signed  patients.pgsurveying.com;
@@ -1863,6 +1946,7 @@
 philadelphiarunner.com          require_signed  philadelphiarunner.ccsend.com;
 phila.gov                       signed_white    "phila.onmicrosoft.com,auth.ccsend.com";    // unsigned via exacttarget not listed in their spf record
 philamuseum.org                 signed_white    "cmail19.com,cmail20.com";      // some unsigned mail via outlook
+philly.com                      require_signed  philly.com;
 phillyleagues.com               require_signed  phillyleagues.ccsend.com;
 phillynewssubscriptionservices.com      require_signed  phillynewssubscriptionservices.com;
 phillypaws.org                  require_signed  icontactmail9.com;
@@ -1874,6 +1958,7 @@
 physiqonomics.com               require_signed  ckmail4.com;
 piab.com                        require_signed  piab.com;
 pianet.org                      require_signed  "moon-ray.com,mmsend.com";
+pika-energy.com                 require_signed  pika-energy-com.20150623.gappssmtp.com;
 pimed.com                       require_signed  lists.jobsonmail.com;
 pimhendriksen.com               require_signed  emlr2.com;
 pinebrookroasters.com           require_signed  netorgft1374413.onmicrosoft.com;
@@ -1884,11 +1969,13 @@
 pmc.com                         require_signed  pmc.com;
 pmrgi.com                       require_signed  cvent-planner.com;
 pods.com                        require_signed  pods.com;
+politicoemail.com               require_signed  politicoemail.com;
 pond5.com                       require_signed  e.pond5.com;
 pony.org                        require_signed  pony.ccsend.com;
 poolhost.com                    require_signed  poolhost.com;
 popmoney.com                    require_signed  popmoney.com;
 popsugar.com                    signed_white    "popsugar.com,auth.ccsend.com"; // unsigned mail via netsuite
+portal.io                       require_signed  portal-io.20150623.gappssmtp.com;
 postergarden.com                require_signed  postergarden.com;
 powell.com                      require_signed  powell.com;
 ppfa.org                        require_signed  ppfa.org;
@@ -1902,6 +1989,7 @@
 princetheater.org               signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 printavo.com                    require_signed  printavo.com;
 printmediamn.com                require_signed  northlightcolor.ccsend.com;
+printpack.com                   require_signed  printpack-com.20150623.gappssmtp.com;
 privy.com                       require_signed  privy.com;
 procerahealth.com               require_signed  "procerahealth.com,auth.ccsend.com";
 procureware.com                 require_signed  procureware.com;
@@ -1938,7 +2026,9 @@
 quellrelief.com                 require_signed  "quellrelief.com,*.hubspotemail.net"
 questdiagnostics.com            require_signed  inbound.dcm8.com;
 questexnetwork.com              require_signed  questexnetwork.com;
+quinnipiac-info.org             require_signed  quinnipiac-info.org;
 quora.com                       require_signed  "quora.com,email.quora.com";
+quote01.email-allstate.com      require_signed  quote01.email-allstate.com;
 quotemyumbrella.com             require_signed  icontactmail2.com;
 quotient.com                    signed_white    couponsinc.onmicrosoft.com;     // some unsigned mail via salesforce
 racewire.com                    require_signed  racewire.com;
@@ -1948,6 +2038,7 @@
 rallypoint.com                  require_signed  rallypoint.com;
 randjsc.com                     require_signed  randjsc.onmicrosoft.com;
 randpac.com                     require_signed  bluehornet.com;
+randstadusa.com                 require_signed  rfo.contacts.randstadusa.com;
 randybryceforcongress.com       require_signed  bounce.bluestatedigital.com;
 rapidnews.com                   require_signed  "rapidnews-com.20150623.gappssmtp.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 ravepro.com                     require_signed  icontactmail1.com;
@@ -2007,8 +2098,9 @@
 rismedia-enews.com              require_signed  rismedia-enews.com;
 ritz-ritz.us                    require_signed  ritz-ritz.us;
 rlsassociates.com               require_signed  icontactmail3.com;
-roberthalf.com                  require_signed  roberthalf.onmicrosoft.com;
+roberthalf.com                  signed_white    roberthalf.onmicrosoft.com;     // some unsigned via geninfo.com
 robsonforensic.com              signed_white    "*.shared.hubspot.com";         // unsigned mail from their barracuda servers
+roku.com                        require_signed  roku.onmicrosoft.com;
 roomster.com                    require_signed  roomster.com;
 rosewe.com                      require_signed  rosewe.com;
 roundabouttheatre.org           require_signed  roundabouttheatre.org;
@@ -2018,17 +2110,20 @@
 rs.email.nextdoor.com           require_signed  email.nextdoor.com;
 rt.email.aa.com                 require_signed  rt.email.aa.com;
 rubinproperties.com             require_signed  rubinproperties-com.20150623.gappssmtp.com;
+rubinproperties.mailer.appfolio.us require_signed  appfolio.com;
 runsignup.com                   require_signed  runsignup.com;
 ruthschrismail.com              require_signed  ruthschrismail.com;
 rwealthmanagement.com           require_signed  rwealthmanagement-com.20150623.gappssmtp.com;
+rwu.edu                         require_signed  technolutions.net;
 rxhealthalerts.com              require_signed  rxhealthalerts.com;
 rxorder.walgreens.com           require_signed  rxorder.walgreens.com;
+saddleback.edu                  require_signed  livesocccd.onmicrosoft.com;
 safehome.adt.com                require_signed  safehome.adt.com;
 safesend.com                    require_signed  safesend.com;
 salamanderhotels.com            require_signed  salamanderhotels.com;
 salamanderresort.com            require_signed  "salamanderresort.com,salamanderhotels.com";
 samplingsupplies.com            require_signed  samplingsupplies.com;
-sandpiperrental.com             require_signed  sandpiperrental.com;
+sandpiperrental.com             require_signed  "sandpiperrental.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";;
 santamariasun.com               require_signed  santamariasun-com.20150623.gappssmtp.com;
 sap.com                         signed_white    bluehornet.com;                 // probably other signers
 save.nature.org                 require_signed  save.nature.org;
@@ -2049,11 +2144,13 @@
 seatme.com                      require_signed  seatme.com;
 secondstreet.com                require_signed  secondstreet.com;
 securedata-trans.com            require_signed  mg.securedata-trans.com;
+secure.fraudarmorservice.com    require_signed  secure.fraudarmorservice.com;
 secure.norton.com               require_signed  secure.norton.com;
 secureserver.net                require_signed  em.secureserver.net;
 selectmedical.com               require_signed  selectmedical.com;
 sellerlabs.com                  require_signed  "sellerlabs.com,dripemail2.com,pm.mtasv.net";
 send.grammarly.com              require_signed  send.grammarly.com;
+sendtax.hrblock.com             require_signed  sendtax.hrblock.com;
 sennheiser.com                  require_signed  sennheiseroffice365.onmicrosoft.com;
 sensorcon.com                   require_signed  sensorcon-com.20150623.gappssmtp.com;
 service01.email-allstate.com    require_signed  service01.email-allstate.com;
@@ -2096,7 +2193,7 @@
 shoptalk.com                    require_signed  shoptalk.com;
 shoptiques.com                  require_signed  shoptiques.com;
 shutterstockmail.com            require_signed  shutterstockmail.com;
-siegelagency.com                require_signed  pptsend03.com;
+siegelagency.com                require_signed  "siegelagency.ccsend.com,pptsend03.com";
 signaturehardware.com           require_signed  signaturehardware.com;
 signnow.com                     require_signed  signnow.com;
 signprosystems.com              require_signed  orbus.ccsend.com;
@@ -2109,8 +2206,10 @@
 sjf.com                         require_signed  sjf.ccsend.com;
 skechers-alerts.com             require_signed  skechers-alerts.com;
 skechers.com                    require_signed  bluehornet.com;
+skillshare.com                  require_signed  skillshare.com;
 skillsurvey.com                 require_signed  skillsurvey.com;
 skuvault.com                    require_signed  skuvault.com;
+slack.com                       require_signed  slack.com;
 slinfo.pptsend02.com            require_signed  slinfo.pptsend02.com;
 s.logmein.com                   require_signed  s.logmein.com;
 smartpros.com                   require_signed  smartpros.com;
@@ -2120,6 +2219,7 @@
 smith-wesson.com                require_signed  icontactmail1.com;
 smitv.org                       require_signed  "netorg1915413.onmicrosoft.com,auth.ccsend.com";
 smm.global                      require_signed  smm.global;
+smp.org                         require_signed  smp.org;
 smtx.mcafee.com                 require_signed  smtx.mcafee.com;
 smugmug.com                     require_signed  smugmug.com;
 snapchat.com                    signed_white    snapchat.com;                   // some unsigned mail
@@ -2132,6 +2232,7 @@
 socksaddict.com                 require_signed  bronto.com;
 sony.com                        signed_white    sony.onmicrosoft.com;           // some unsigned mail via lightpath
 sos.ca.gov                      require_signed  "californiagold.onmicrosoft.com,auth.ccsend.com";
+soul-cycle.com                  require_signed  e2ma.net;
 soundcloud.com                  require_signed  soundcloud.com;
 sourcelink.com                  require_signed  sourcelink.com;
 sourceone.nazdar.com            require_signed  reachmail.net;
@@ -2143,6 +2244,7 @@
 spiceworks.com                  require_signed  spiceworks.com;
 spie.org                        require_signed  spieorg.onmicrosoft.com;
 splitly.com                     require_signed  splitly.com;
+spotcrime.com                   require_signed  spotcrime.com;
 spotify.com                     require_signed  spotify.com;
 springboardmedia.com            require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 springer.com                    require_signed  springer.com;
@@ -2169,6 +2271,7 @@
 steelforge.com                  require_signed  b2b-mail.net;
 sterlinglimoservice.com         require_signed  aro365516309.onmicrosoft.com;
 stjstr.org                      require_signed  "stjstr-org.20150623.gappssmtp.com,mystudentsprogress.com";
+stonybrook-u.org                require_signed  stonybrook-u.org;
 store.aabacosmallbusiness.com   require_signed  yahoo.com;
 store.yahoo.com                 require_signed  yahoo.com;
 stringacademyofwisconsin.org    require_signed  panthers.onmicrosoft.com;
@@ -2176,6 +2279,7 @@
 strongmail.cfmvmail.com         require_signed  strongmail.cfmvmail.com;
 style.adoreme.com               require_signed  style.adoreme.com;
 style.letote.com                require_signed  style.letote.com;
+subscriptions.cms.hhs.gov       require_signed  subscriptions.cms.hhs.gov;
 subscriptions.gaia.com          require_signed  subscriptions.gaia.com;
 subscriptions.ssa.gov           require_signed  subscriptions.ssa.gov;
 subscription.theatlantic.com    require_signed  subscription.theatlantic.com;
@@ -2205,7 +2309,7 @@
 sxsw.com                        require_signed  "sxsw.com,mmxreservations.com";
 symantec.rsys2.com              require_signed  rsys2.com;
 syncplicity.com                 require_signed  syncplicity.com;
-synergem.com                    require_signed  synergem-com.20150623.gappssmtp.com;
+synergem.com                    require_signed  "synergem-com.20150623.gappssmtp.com,synergem.ccsend.com";
 syvchorale.org                  require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 talend.com                      require_signed  talend.com;
 talentsmartnewsletter.com       require_signed  email.talentsmartnewsletter.com;
@@ -2221,6 +2325,7 @@
 team.wrike.com                  require_signed  "wrike.com,mktomail.com";
 teapartybulletin.com            require_signed  teapartybulletin.com;
 teapartypolitics.com            require_signed  teapartypolitics.com;
+teapartypoliticsnews.com        require_signed  teapartypoliticsnews.com;
 techforless-alerts.com          require_signed  techforless-alerts.com;
 telescopecasual.com             require_signed  telescope.onmicrosoft.com;
 tennettmfg.com                  require_signed  tennettmfg.com;
@@ -2230,6 +2335,7 @@
 thankyou.citibank.com           require_signed  thankyou.citibank.com;
 thankyouemails.org              require_signed  thankyouemails.org;
 theaddictedlawyer.com           require_signed  theaddictedlawyer.com;
+theanimalrescuesite.com         require_signed  theanimalrescuesite.com;        // unsigned mail but it passes spf
 theatre.info.cinemark.com       require_signed  theatre.info.cinemark.com;
 theatrephiladelphia.org         require_signed  theatrephiladelphia.ccsend.com;
 thechivery.com                  require_signed  thechivery.com;
@@ -2253,6 +2359,7 @@
 thewarmingstore.com             require_signed  icontactmail1.com;
 thingiverse.com                 require_signed  thingiverse.com;
 thingtobring.com                require_signed  sendgrid.me;
+thinknewmexico.org              require_signed  congressplus.com;
 thinoptics.com                  require_signed  "groupvine.com,bronto.com";
 thirdlove.com                   require_signed  thirdlove.com;
 thomasnet.com                   require_signed  thomasnet.com;
@@ -2264,8 +2371,10 @@
 ticketfly.com                   require_signed  ticketfly.com;
 ticketleap.com                  require_signed  "ticketleap.com,amazonses.com";
 ticketmaster.com                require_signed  ticketmaster.com;
+tickets.rugbyworldcup.com       require_signed  tickets.rugbyworldcup.com;
 tidio.net                       require_signed  "tidio.net,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 tieivote.com                    require_signed  smtpserver.email;
+timeout.com                     require_signed  timeout-com.20150623.gappssmtp.com;
 tiogahvac.com                   require_signed  tiogahvac.onmicrosoft.com;
 t.kohls.com                     require_signed  t.kohls.com;
 t.mail.coursera.org             require_signed  t.mail.coursera.org;
@@ -2274,16 +2383,17 @@
 tomudall.com                    signed_white    bounce.bluestatedigital.com;
 toomeyforsenate.com             require_signed  toomeyforsenate.com;
 toomey.senate.gov               require_signed  senate.gov;
-touchstonehomeproducts.com      signed_white    "yahoo.com,auth.ccsend.com";
+touchstonehomeproducts.com      signed_white    "yahoo.com,auth.ccsend.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 tower90230.com                  require_signed  tower90230.onmicrosoft.com;
 townhallmail.com                require_signed  townhallmail.com;
+trade.gov                       require_signed  trade.gov;
 traillink.com                   require_signed  traillink.com;
 training.compliancekey.net      require_signed  training.compliancekey.net;
 trainingmag.com                 require_signed  "*.n-email5.net,*.n-email.net"
 trans.duluthtradingemail.com    require_signed  trans.duluthtradingemail.com;
 transferwise.com                require_signed  transferwise.com;
 traveloni.com                   require_signed  "traveloni.com,traveloni.ccsend.com";
-travismanion.org                require_signed  omktmail2.com;
+travismanion.org                require_signed  "travismanion.org,omktmail2.com,icontactmail9.com";
 treasuryandtradesolutions.citi.com require_signed  treasuryandtradesolutions.citi.com;
 trekbikes.com                   require_signed  e.trekbikes.com;
 trello.com                      require_signed  trello.com;
@@ -2299,6 +2409,7 @@
 ttmail.timetrade.com            require_signed  timetrade.com;
 tuhs.temple.edu                 require_signed  tuhs.onmicrosoft.com;
 turnoutpac.org                  signed_white    bounce.bluestatedigital.com;
+tut.com                         require_signed  tut.ccsend.com;
 t.wilsonsleather.com            require_signed  t.wilsonsleather.com;
 twitter.com                     require_signed  twitter.com;
 tx.redbox.com                   require_signed  tx.redbox.com;
@@ -2309,6 +2420,7 @@
 ubs.com                         require_signed  ubs.com;
 ucla.edu                        signed_white    ucla-edu.20150623.gappssmtp.com;    // probably not the only source
 ucsb.edu                        require_signed  "ltsc.ucsb.edu,imodules.com";
+uh.edu                          signed_white    amazonses.com                   // Coognews
 ulta.com                        require_signed  ulta.com;
 ultimateestateplanner.com       require_signed  ultimateestateplanner.ccsend.com;
 umail.ucsb.edu                  require_signed  "ltsc.ucsb.edu,gmail.com";      // google groups mail for michael signed by gmail
@@ -2323,6 +2435,8 @@
 universalsocceracademy.com      require_signed  universalsocceracademy.ccsend.com;
 universityproducts.com          signed_white    icontactmail3.com;              // unsigned mail from their own servers, no spf txt record
 unm.edu                         require_signed  unmm.onmicrosoft.com;
+unyson.com                      require_signed  unyson.com;
+uofpittgreensburg.org           require_signed  uofpittgreensburg.org;
 update.santanderbank.com        require_signed  update.santanderbank.com;
 updates.conservativeintel.com   require_signed  updates.conservativeintel.com;
 updates.hayneedle.com           require_signed  updates.hayneedle.com;
@@ -2335,6 +2449,7 @@
 upsemail.com                    require_signed  upsemail.com;                   // actually is ups
 upsfreight.com                  require_signed  upsfreight.com;
 upsilonventures.com             require_signed  upsilonllc.onmicrosoft.com;
+upwork.com                      require_signed  mg.upwork.com;
 urthave.com                     require_signed  urthave.com;
 usa.constitutionalrightspac.com require_signed  usa.constitutionalrightspac.com;
 usbank.com                      require_signed  usbank.com;
@@ -2354,6 +2469,7 @@
 value.kmart.com                 require_signed  value.kmart.com;
 value.sears.com                 require_signed  value.sears.com;
 vanguardcharitable.org          require_signed  cvent-planner.com;
+vehiclemerchandising.com        require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 venmo.com                       require_signed  venmo.com;
 verifone.com                    require_signed  "verifone.com,verifone365.onmicrosoft.com";
 veritivcorp.com                 signed_white    veritivcorp.onmicrosoft.com;    // unsigned via apexanalytix.com that fails spf
@@ -2368,6 +2484,8 @@
 visitpartnerhub.com             require_signed  visitpartnerhub.com;
 visitwynn.com                   require_signed  visitwynn.com;
 visstun-digispec.com            require_signed  "smtpserver.email,smtpsendmail.com";
+vistana.com                     require_signed  iilg.onmicrosoft.com;           // some unsigned mail passes spf
+vitalnetix.com                  require_signed  vitalnetix.onmicrosoft.com;
 vitaminmom.com                  require_signed  vitaminmom-com.20150623.gappssmtp.com;
 vivial.net                      require_signed  "vivial.net,email.nearsay.com";
 vlmservice.com                  signed_white    smtpserver.email;               // some unsigned mail via exacttarget
@@ -2382,12 +2500,15 @@
 wanjugo.com                     require_signed  wanjugo.com;
 warriorcustomgolf.com           require_signed  warriorcustomgolf.com;
 washingtonpost.com              require_signed  washingtonpost.com;
+washjeff-info.org               require_signed  washjeff-info.org;
 washtimesnews.com               require_signed  washtimesnews.com;
 watchdog.net                    require_signed  sg.actionnetwork.org;
 watchmanmonitoring.com          require_signed  watchmanmonitoring.com;
+waterboards.ca.gov              require_signed  cawaterboards.onmicrosoft.com;
 wayfair.com                     require_signed  "wayfair.com,wayfair.onmicrosoft.com";
 wdsearch.com                    require_signed  wdsearch.com;
 wealthyretirement.com           require_signed  wealthyretirement.com;
+wearealexander.com              require_signed  wearealexander-com.20150623.gappssmtp.com;
 wearecollide.com                require_signed  "wearecollide-com.20150623.gappssmtp.com,mlsend3.com";
 weareultraviolet.org            require_signed  "weareultraviolet.org,list.weareultraviolet.org";
 weather.com                     require_signed  weather.com;
@@ -2433,12 +2554,15 @@
 woof.barkshop.com               require_signed  woof.barkshop.com;
 woof.chewy.com                  require_signed  woof.chewy.com;
 woolrich.com                    require_signed  woolrich.com;
+wordpress.com                   require_signed  wordpress.com;
 worknetoccmed.com               require_signed  worknetoccmed.com;
 worldsciencefestival.com        require_signed  worldsciencefestival.com;
-wrigley.com                     require_signed  wrigley.com;
+wrigley.com                     require_signed  "wrigley.com,e2ma.net";
+wsdisplay.com                   require_signed  wsdisplay-com.20150623.gappssmtp.com;
 wstelecomlaw.com                require_signed  sapronov.onmicrosoft.com;
 wtcphila.org                    require_signed  "wtcphila.onmicrosoft.com,wtcphila.ccsend.com";
 wullo.com                       require_signed  wullo.com;
+wunderman.com                   require_signed  yrb.onmicrosoft.com;
 wyattresearchnewsletters.com    require_signed  wyattresearchnewsletters.com;
 x2vol.com                       require_signed  sendgrid.info;
 xarisma.com                     signed_white    xarisma.com;                    // some unsigned mail via netsuite.com
@@ -2449,6 +2573,7 @@
 yellowstone.org                 require_signed  mta-bbcspool.convio.net;
 yelp.com                        signed_white    yelp.com;                       // some unsigned mail from their own servers
 yipit.com                       require_signed  yipit.com;
+ymca-snoco.org                  require_signed  ymcasnoco.onmicrosoft.com;
 y.mileskimball.com              require_signed  y.mileskimball.com;
 youcaring.com                   require_signed  youcaring.com;
 youngliving.com                 require_signed  youngliving.com;
@@ -2467,6 +2592,7 @@
 ziprecruiter.com                require_signed  "ziprecruiter.com,sendgrid.me,sendgrid.ziprecruiter.com";
 zixmessagecenter.com            require_signed  zixmessagecenter.com;
 zomato.com                      require_signed  zomato.com;
+zoomcake.com                    require_signed  zoomcake.com;
 zoom.us                         require_signed  zoom.us;
 zooprinting.com                 require_signed  eoncode.com;
 zorpia.com                      require_signed  zorpia.com;

--- a/dnsbl.spec.in	Mon Feb 19 15:25:40 2018 -0800
+++ b/dnsbl.spec.in	Mon Feb 19 15:30:00 2018 -0800
@@ -155,6 +155,11 @@
 
 
 %changelog
+* Mon Feb 19 2018 Carl Byington <carl@five-ten-sg.com> - 6.68-1
+- round rather than truncate spam assassin scores.
+- check >= rather than > for spam assassin scores to match
+  behavior of dcc bulk scores.
+
 * Fri Jan 05 2018 Carl Byington <carl@five-ten-sg.com> - 6.67-1
 - always call dcc code so we get log entries