--- a/dnsbl.dkim.conf	Tue Oct 24 08:54:45 2017 -0700
+++ b/dnsbl.dkim.conf	Tue Oct 24 08:55:31 2017 -0700
@@ -4,6 +4,7 @@
 123greetings.biz                require_signed  123greetings.biz;
 123greetings.info               require_signed  123greetings.info;
 123rf.com                       require_signed  "123rf.com,123rf-com.20150623.gappssmtp.com";
+160over90.com                   require_signed  160over90.onmicrosoft.com;
 1and1.com                       require_signed  1and1.com;
 1stimpressioncom.com            require_signed  becausewearewomen.ccsend.com;
 247cpe.com                      require_signed  247cpe.com;
@@ -25,6 +26,7 @@
 abbeypress.com                  require_signed  abbeypress.com;
 abcomrents.com                  require_signed  abcomrents.com;
 abingtonaesthetic.com           require_signed  "yahoo.com,em.secureserver.net";
+abqchamber.com                  require_signed  icontactmail4.com;
 abt.com                         require_signed  abt-com.20150623.gappssmtp.com;
 academia-mail.com               require_signed  academia-mail.com;
 acclivitysoftware.com           require_signed  acclivitysoftware.com;
@@ -66,15 +68,18 @@
 adv.strawberrynet.com           require_signed  adv.strawberrynet.com;
 afar.com                        require_signed  afar.com
 aflac-email.com                 require_signed  aflac-email.com;
+aflac-onlineservices.com        require_signed  aflac-onlineservices.com;
 afsc.org                        require_signed  afsc.org;
+afsp.org                        require_signed  "auth.ccsend.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 againstallgrain.com             require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 agencyprotalent.com             require_signed  agencyprotalent.com;
 agent.thehartford.com           require_signed  agent.thehartford.com;
 agfa.com                        require_signed  www-agfa.ccsend.com;
 agingcare.com                   require_signed  agingcare.com;
-agoodson.com                    require_signed  emlr2.com;
+agoodson.com                    require_signed  "emlr2.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 agu.org                         require_signed  agu.org;
 aiaa.org                        require_signed  aiaa.org;
+aiga.org                        require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 airbnb.com                      require_signed  email.airbnb.com;
 airconway.com                   require_signed  airconway.ccsend.com;
 airstoc.com                     require_signed  airstoc.com;
@@ -88,6 +93,7 @@
 alertsp.chase.com               require_signed  alertsp.chase.com;
 alerts.santander.us             require_signed  alerts.santander.us;
 alerts.skype.com                require_signed  alerts.skype.com;
+alerts.trulia.com               require_signed  alerts.trulia.com;
 alexandani.com                  require_signed  alexandani.com;
 alignable.com                   require_signed  "alignable.com,invites.alignable.com";
 allaboutjazz.com                require_signed  allaboutjazz.com;
@@ -114,8 +120,10 @@
 amazonsellerservices.com        require_signed  amazonsellerservices.com;
 amcp.custombriefings.com        require_signed  custombriefings.com;
 americangreetings.com           require_signed  americangreetings.com;
-americansuspension.com          require_signed  store.smtp.bigcommerce.net;
+americansuspension.com          require_signed  "store.smtp.bigcommerce.net,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 americaslibertypac.com          require_signed  bluehornet.com;
+ameritas.com                    require_signed  "*.memberemail.com";
+amleo.com                       require_signed  amleo.com;
 amrevmuseum.org                 require_signed  "amrevmuseum.onmicrosoft.com,americanrevolutioncenter.ccsend.com,mta-bbcspool.convio.net";
 am.sony.com                     signed_white    sony.onmicrosoft.com;           // some unsigned mail via lightpath
 a.narrativemagazine.com         require_signed  a.narrativemagazine.com;
@@ -154,6 +162,7 @@
 atdcd-media.com                 require_signed  atdcd-media.com;
 athero.org                      require_signed  "*.musvc.com";
 att.tm00.com                    require_signed  tm00.com;
+audible.com                     require_signed  audible.com;
 audicommunication.com           require_signed  audicommunication.com;
 audiencerewards.com             require_signed  audiencerewards.com;
 autodeskcommunications.com      require_signed  autodeskcommunications.com;
@@ -165,10 +174,12 @@
 azureemail.microsoft.com        require_signed  azureemail.microsoft.com;
 backupify.com                   require_signed  backupify.com;
 bacnyc.org                      require_signed  bacnyc.ccsend.com;
+baltimorecomiccon.com           require_signed  baltimorecomiccon.ccsend.com;
 bankofamerica.com               require_signed  bankofamerica.com;
 bankofinternet.com              require_signed  bankofinternet.com;
 barackobama.com                 require_signed  barackobama.com
 bartlettbearing.com             require_signed  "bartlettbearing.onmicrosoft.com,auth.ccsend.com";
+basspronews.com                 require_signed  basspronews.com;
 basusa.com                      signed_white    myenrollservices.onmicrosoft.com;   // some unsigned mail from their own servers with no spf record
 bbdo.com                        require_signed  bbdo.com;
 bbofpa.com                      require_signed  bbofpa.ccsend.com;
@@ -185,9 +196,11 @@
 behance.com                     require_signed  behance.com;
 belkemail.com                   require_signed  belkemail.com;
 belly-mail.com                  require_signed  main.belly-mail.com;
+b.email.hayneedle.com           require_signed  email.hayneedle.com;
 benrlujan.com                   require_signed  bounce.myngp.com;
 betabrand.com                   require_signed  email.betabrand.com;
 bethany2016.com                 require_signed  bounce.myngp.com;
+betterworldbooks.com            require_signed  mailer.betterworldbooks.com;
 bgeneral.com                    signed_white    bgeneral.com;                   // some unsigned mail via bgeneral.com
 bhfs.com                        signed_white    "bhfs.com,brownsteinhyattfarberschreck.onmicrosoft.com";    // temp errors, 0 bit key
 biblicalarchaeology.org         require_signed  biblicalarchaeology.wc08.net;
@@ -210,9 +223,10 @@
 blueshoreproperties.com         require_signed  icontactmail2.com;
 bluesoftware.com                require_signed  bluesoftware.com;
 bluesombrero.com                require_signed  send.bluesombrero.com;
-bma1.com                        require_signed  bma1-com.20150623.gappssmtp.com;
+bma1.com                        require_signed  "bma1-com.20150623.gappssmtp.com,reply.onehub.com";
 bmj.com                         require_signed  bmj.com;
 bmwfs.com                       require_signed  bmwfs.com;
+bmwofmtlaurel.com               require_signed  xtime.com;
 bnbestimating.com               require_signed  bnbestimating-com.20150623.gappssmtp.com;
 boatus.com                      require_signed  boatus.wc08.net;
 bobcasey.com                    signed_white    bounce.bluestatedigital.com;
@@ -222,6 +236,7 @@
 bookbub.com                     require_signed  bookbub.com;
 bookbyte.com                    require_signed  bookbyte.com;
 booking.com                     require_signed  "booking.com,sg.booking.com";
+bossard.com                     require_signed  bosnet.onmicrosoft.com;
 box.com                         require_signed  box.com;
 boxed.com                       require_signed  boxed.com;
 boydsphila.com                  require_signed  boydsphila.ccsend.com;
@@ -245,9 +260,12 @@
 burpeenews.com                  require_signed  burpeenews.com;
 business.amazon.com             require_signed  business.amazon.com;
 businessinsider.com             require_signed  businessinsider.com;
+b.us.underarmour.com            require_signed  "*.underarmour.com";
+buykud.com                      require_signed  buykud.com;
 cadsourcing.com                 require_signed  cadsourcing-com.20150623.gappssmtp.com;
 cafarogreenleaf.com             require_signed  cafarogreenleaf.ccsend.com;
 cafepress.com                   require_signed  cafepressinc.onmicrosoft.com;
+calbt.com                       require_signed  email-od.com;
 calparks.org                    require_signed  mta-bbcspool.convio.net;
 calvaryabq.org                  require_signed  calvaryabq.org;
 camasb.org                      signed_white    camasb.org;                     // some unsigned mail via coxmail that fails spf
@@ -265,6 +283,7 @@
 carnivalcruiselineemail.com     require_signed  carnivalcruiselineemail.com;
 caskers.com                     require_signed  caskers.com;
 catapultmarketing.com           require_signed  epsilon.onmicrosoft.com;
+catholiccompany.com             require_signed  catholiccompany.com;
 cbginc.com                      require_signed  cbginc-com.20150623.gappssmtp.com;
 cbldf.org                       signed_white    "nationsend6.com,nationsend14.com,nationsend17.com";
 cbp.dhs.gov                     require_signed  cbpgov.onmicrosoft.com;
@@ -276,8 +295,10 @@
 cbsradio.com                    require_signed  cbs.onmicrosoft.com;
 cc.att-mail.com                 require_signed  cc.att-mail.com;
 cc.binders.com                  require_signed  binders.com;
+cchcpelink.com                  require_signed  cchcpelink.com;
 ccphilly.org                    require_signed  smtpcorp.com;
 cc.yahoo-inc.com                require_signed  cc.yahoo-inc.com;           // yahoo signin notifications
+cdsanalytical.com               require_signed  cdsanalytical.onmicrosoft.com;
 cdwemail.com                    require_signed  cdwemail.com;
 ceainfo.org                     require_signed  ceainfo.org;
 ce.homeadvisor.com              require_signed  ce.homeadvisor.com;
@@ -286,15 +307,19 @@
 cerner.com                      require_signed  cerner.com;                 // client of mediasupply
 cfostudio.com                   require_signed  cvent-planner.com;
 chambermusicinstitute.com       require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+change.jetblue.com              require_signed  change.jetblue.com;
 change.org                      signed_white    change.org;                 // some unsigned mail via exacttarget
 charlesmichaelphotography.com   require_signed  emlr2.com;
 checkin.email.aa.com            require_signed  checkin.email.aa.com;
+chocolateammo.com               require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 chownow.com                     require_signed  chownow.com;
 chriscoons.com                  signed_white    bounce.bluestatedigital.com;
 chrismurphy.com                 require_signed  chrismurphy.com;
 christianacare.org              signed_white    "cchs.onmicrosoft.com,mktomail.com";
 christianbook.com               require_signed  christianbook.com;
+c.hyatt.com                     require_signed  c.hyatt.com;
 cintas.com                      require_signed  cintas.com;
+cir.acmemarketemails.com        require_signed  cir.acmemarketemails.com;
 citibank.com                    require_signed  citibank.com;
 citrixonline.com                require_signed  citrixonline.com;
 citybizlist.com                 require_signed  bsf01.com;
@@ -307,7 +332,9 @@
 classicspecs.com                require_signed  classicspecs.com;
 clddigital.com                  require_signed  cldgraphics.onmicrosoft.com;
 cleanrouter.com                 require_signed  "*.cleanrouter.com";
+clearlaws.com                   require_signed  clearlaws.com;
 click.dandb.com                 require_signed  click.dandb.com;
+clilearning.com                 require_signed  clilearning.com;
 climber.com                     require_signed  climber.com;
 clothingline.com                require_signed  clothingline.ccsend.com;
 cloud.carbonite.com             require_signed  cloud.carbonite.com;
@@ -317,6 +344,8 @@
 cmdnet.org                      require_signed  cmdnet.org;
 cm.zazzle.com                   require_signed  cm.zazzle.com
 cnczone.com                     require_signed  cnczone.com;
+cohnreznick.com                 require_signed  cohnreznick.onmicrosoft.com;
+coinbase.com                    require_signed  coinbase.com;
 colocation.com                  require_signed  colocation-com.20150623.gappssmtp.com;
 colonialevents.fan-one.com      require_signed  colonialevents.fan-one.com;
 coloradoproduce.org             require_signed  coloradoproduce.ccsend.com;
@@ -338,6 +367,7 @@
 conservativesource.com          require_signed  conservativesource.com;
 conshohockenporsche.com         require_signed  "*.shared.hubspot.com,*.hubspotemail.net";
 consigli.com                    require_signed  "consigli.com,consiglico.onmicrosoft.com";
+contact.britishairways.com      require_signed  bounce.ba.com;
 contact-client.com              require_signed  contact-client.com;
 contractimprint.com             require_signed  criticalimpactinc.com;
 cookwoods.com                   require_signed  cookwoods.ccsend.com;
@@ -357,6 +387,7 @@
 crashplan.com                   require_signed  crashplan.com;
 crcind.com                      require_signed  crcglobal.onmicrosoft.com;
 create.paper-source.com         require_signed  create.paper-source.com;
+creativecircle.com              signed_white    creativecircle.onmicrosoft.com; // some unsigned mail
 creativegroup.com               require_signed  "roberthalf.onmicrosoft.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 creativemag.com                 signed_white    creativemagazine.ccsend.com;    // some unsigned mail via gmail
 creditkarma.com                 require_signed  creditkarma.com;
@@ -368,6 +399,7 @@
 c-sgroup.com                    require_signed  c-sgroup.com;
 csifoodpro.com                  require_signed  csifoodpro.ccsend.com;
 csmail.peoplefinders.com        require_signed  csmail.peoplefinders.com;
+css.email.aa.com                require_signed  css.email.aa.com;
 csuchico.edu                    require_signed  csuchico.edu;
 csusb.edu                       require_signed  "csusb.edu,auth.ccsend.com";
 culvercitychamber.com           require_signed  culvercitychamber.ccsend.com;
@@ -417,9 +449,11 @@
 digdev.com                      require_signed  digdevdirect.onmicrosoft.com;
 digest.producthunt.com          require_signed  digest.producthunt.com;
 dimensiondesign.com             require_signed  "mx-senderer-02.com,mx-senderer-03.com";
+dimin.com                       require_signed  dimin-com.20150623.gappssmtp.com;
 directbuy.com                   require_signed  directbuy.com;
 direct.mercurynews.com          require_signed  direct.mercurynews.com;
 directoryofillustration.com     require_signed  directoryofillustration.com;
+directvote.net                  require_signed  smtpsendmail.com;
 discogs.com                     require_signed  discogs.com;
 discoverphl.com                 require_signed  discoverphl.com;
 discover.zinio.com              require_signed  discover.zinio.com;
@@ -429,6 +463,7 @@
 djmarks.com                     require_signed  djmarks.ccsend.com;
 dlsdiscovery.net                require_signed  dlsdiscovery.net;
 dmgiant.del2.com                require_signed  del2.com;
+dmrgraphics.com                 require_signed  netorgft3071376.onmicrosoft.com;
 dnc.com                         require_signed  dnc.com;
 dnc.org                         require_signed  dnc.org;
 doa.nc.gov                      require_signed  doa.nc.gov;
@@ -439,14 +474,17 @@
 dolphinproject.com              require_signed  sg.actionnetwork.org;
 donaldjtrump.com                require_signed  donaldjtrump.com;
 donaldson.com                   require_signed  donaldson.onmicrosoft.com;
+doodle.com                      require_signed  e.doodle.com;
 dor.state.ma.us                 signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 dpreview.com                    require_signed  dpreview.com;
 dreamstime.com                  require_signed  dreamstime.com;
 drexel.edu                      require_signed  "drexel0.onmicrosoft.com,imodules.com";
+drobo.com                       require_signed  drobo.com;
 dropbox.com                     require_signed  dropbox.com;
 dropboxmail.com                 require_signed  dropboxmail.com;
 drpa.org                        require_signed  "drpapatco.onmicrosoft.com,drpapatco.ccsend.com";
 drsfostersmith.com              require_signed  drsfostersmith.com;
+drwc.org                        require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 dscc.org                        require_signed  dscc.org;
 dslgroup.com                    require_signed  dslgroup.ccsend.com;            // needs spf for some unsigned mail from their own servers
 ducotech.com                    signed_white    ducotech.ccsend.com;            // some unsigned mail from their own servers
@@ -463,12 +501,15 @@
 e.airgas.com                    require_signed  e.airgas.com;
 ealerts.bankofamerica.com       require_signed  ealerts.bankofamerica.com;
 e.allrecipes.com                require_signed  e.allrecipes.com;
+ealogistics.com                 require_signed  ealogistics1.onmicrosoft.com;
 e.appleseeds.com                require_signed  e.appleseeds.com;
 eastwood.com                    require_signed  eastwood.com;
 easy.staples.com                require_signed  easy.staples.com;
+easywoodtools.com               require_signed  easywoodtools.ccsend.com;
 eat24.com                       require_signed  eat24.com;
 e.att-mail.com                  require_signed  e.att-mail.com;
 e.avis.com                      require_signed  e.avis.com;
+e.basbleu.com                   require_signed  e.basbleu.com;
 ebay.com                        require_signed  ebay.com;
 e.berries.com                   require_signed  e.berries.com;
 e.bevmo.com                     require_signed  e.bevmo.com;
@@ -479,8 +520,10 @@
 e.build.com                     require_signed  e.build.com;
 e.business.officedepot.com      require_signed  e.business.officedepot.com;
 e.campingworld.com              require_signed  e.campingworld.com;
+e.campingworldrv.com            require_signed  e.campingworldrv.com;
+ecerts.americanexpress.com      require_signed  ecerts.americanexpress.com;
 echosign.com                    require_signed  echosign.com;
-e.clarksusa.com                 require_signed  e.clarksusa.com;
+e.clarksusa.com                 require_signed  "e.clarksusa.com,bounceexchange.com";
 eclinicalmail.com               require_signed  eclinicalmail.com;
 eclipsegr.com                   require_signed  eclipsegr-com.20150623.gappssmtp.com;
 e.colehaan.com                  require_signed  e.colehaan.com;
@@ -503,6 +546,7 @@
 e.doverpublishing.com           require_signed  e.doverpublishing.com;
 e.drugstore.com                 require_signed  e.drugstore.com;
 edu.cpaacademy.org              require_signed  edu.cpaacademy.org;
+e.ea.com                        require_signed  e.ea.com;
 e.economist.com                 require_signed  e.economist.com;
 e.eharmony.com                  require_signed  e.eharmony.com;
 e.empiretodaynews.com           require_signed  e.empiretodaynews.com;
@@ -512,18 +556,20 @@
 e.expertmarket.com              require_signed  e.expertmarket.com;
 e.fanaticsretailgroup.com       require_signed  e.fanaticsretailgroup.com;
 e.feld-inc.com                  require_signed  e.feld-inc.com;
-effem.com                       require_signed  effem.com;
+effem.com                       signed_white    effem.com;                      // some unsigned coupon mail via nchmarketing.com
 efi.com                         require_signed  efi.com;
 e.fitbit.com                    require_signed  e.fitbit.com;
 efolder.net                     require_signed  mktroute.com;
 e.gamestop.com                  require_signed  e.gamestop.com;
 e.geappliances.com              require_signed  e.geappliances.com;
 e.gogoair.com                   require_signed  e.gogoair.com;
+e.goodsamroadside.com           require_signed  e.goodsamroadside.com;
 e.gourmetgiftbaskets.com        require_signed  e.gourmetgiftbaskets.com;
 e.governmenthealthinsurance.com require_signed  e.governmenthealthinsurance.com;
 e.grainger.com                  require_signed  e.grainger.com;
 egress.com                      require_signed  egress.com;
 e.grubhub.com                   require_signed  e.grubhub.com;
+e.healthandwellnessalerts.berkeley.edu require_signed  e.healthandwellnessalerts.berkeley.edu;
 e.hotwire.com                   require_signed  e.hotwire.com;
 e.hyatt.com                     require_signed  e.hyatt.com;
 eightcoupons.com                require_signed  eightcoupons.com;
@@ -531,6 +577,7 @@
 e.jcpenney.com                  require_signed  e.jcpenney.com;
 e.joann.com                     require_signed  e.joann.com;
 e.landsend.com                  require_signed  e.landsend.com;
+elantrotman.com                 require_signed  elantrotman.ccsend.com;
 e.lbaop.org                     require_signed  e.lbaop.org;
 eleadtrack.net                  require_signed  eleadtrack.net;
 e.leafly.com                    require_signed  e.leafly.com;
@@ -552,6 +599,7 @@
 email1.geico.com                require_signed  email1.geico.com;
 email1.omronhealthcare.com      require_signed  email1.omronhealthcare.com;
 email2.directnic.com            require_signed  directnic.com;
+email2.microsoft.com            require_signed  email2.microsoft.com;
 email2.office.com               require_signed  email2.office.com;
 email2.riteaid.com              require_signed  email2.riteaid.com;
 email3-beyond.com               require_signed  email3-beyond.com;
@@ -560,12 +608,15 @@
 email-aaa.com                   require_signed  email-aaa.com;
 email.aa.com                    require_signed  email.aa.com;
 email.aarp.org                  require_signed  email.aarp.org;
+email.acmemarketemail.com       require_signed  email.acmemarketemail.com;
 email.aegeanair.com             require_signed  email.aegeanair.com;
+email.alignable.com             require_signed  "*.alignable.com";
 email.allrecipes.com            require_signed  email.allrecipes.com;
 email.amc.com                   require_signed  email.amc.com;
 email.americanexpress.com       require_signed  email.americanexpress.com;
 email.americangreetings.com     require_signed  email.americangreetings.com;
 e-mail.amtrak.com               require_signed  e-mail.amtrak.com;
+email.ancestry.com              require_signed  email.ancestry.com;
 email.apple.com                 require_signed  email.apple.com;
 email.athleta.com               require_signed  email.athleta.com;
 email.b0.monster.com            require_signed  email.b0.monster.com;
@@ -585,6 +636,7 @@
 email.coldwatercreek.com        require_signed  coldwatercreek.com;
 emailcoldwatercreek.com         require_signed  emailcoldwatercreek.com;
 email.comcastsportsnet.com      require_signed  email.comcastsportsnet.com;
+email.conservativeintel.com     require_signed  email.conservativeintel.com;
 email.consumerreports.org       require_signed  email.consumerreports.org;
 email.content.monster.com       require_signed  email.content.monster.com;
 email.coolibar.net              require_signed  email.coolibar.net;
@@ -598,6 +650,7 @@
 email.diynetwork.com            require_signed  email.diynetwork.com;
 emaildl.att-mail.com            require_signed  emaildl.att-mail.com;
 email.dowjones.com              require_signed  email.dowjones.com;
+email-dressbarn.com             require_signed  email-dressbarn.com;
 email.ed2go.com                 require_signed  email.ed2go.com;
 email.eileenfisher.com          require_signed  email.eileenfisher.com;
 email.emeraldclub.com           require_signed  email.emeraldclub.com;
@@ -643,9 +696,11 @@
 email.landsend.com              require_signed  email.landsend.com;
 email.lexisnexis.com            require_signed  email.lexisnexis.com;
 email-libertymutual.com         require_signed  email-libertymutual.com;
+email-lifetouch.com             require_signed  email-lifetouch.com;
 email.livenation.com            require_signed  email.livenation.com;
 email.livestrong.com            require_signed  livestrong.com;
 email.microsoftonline.com       require_signed  email.microsoftonline.com;
+email.microsoftrewards.com      require_signed  email.microsoftrewards.com;
 email-modells.com               require_signed  "bounceexchange.com,email-modells.com";
 email.mrporter.com              require_signed  email.mrporter.com;
 email-mrsfields.com             require_signed  email-mrsfields.com;
@@ -653,6 +708,7 @@
 email-nationwide.com            require_signed  email-nationwide.com;
 email.naturehills.com           require_signed  "email.naturehills.com,klaviyomail.com";
 email.naviance.com              require_signed  email.naviance.com;
+email.newegg.com                require_signed  email.newegg.com;
 email.newpig.com                require_signed  email.newpig.com;
 email.nick.com                  require_signed  email.nick.com;
 email-nmss.org                  require_signed  email-nmss.org;
@@ -683,8 +739,10 @@
 e-mailr.roadrunnersports.com    require_signed  e-mailr.roadrunnersports.com;
 emails.aircanada.com            require_signed  emails.aircanada.com;
 email.santanderbank.com         require_signed  email.santanderbank.com;
+emails.brooksbrothers.com       require_signed  emails.brooksbrothers.com;
 emails.buick.com                require_signed  emails.buick.com;
 emails.cafepress.com            require_signed  cafepress.com;
+emails.chase.com                require_signed  emails.chase.com;
 e-mail.schneider-electric.com   require_signed  e-mail.schneider-electric.com;
 email.schoolsfirstfcu.org       require_signed  email.schoolsfirstfcu.org;
 email.scoresense.com            require_signed  email.scoresense.com;
@@ -697,6 +755,7 @@
 e-mail.shoecarnival.com         require_signed  e-mail.shoecarnival.com;
 emails.honda.com                require_signed  emails.honda.com;
 email.siriusxm.com              require_signed  email.siriusxm.com;
+email.sj.aaa.com                require_signed  email.sj.aaa.com;
 email.snagajob.com              require_signed  email.snagajob.com;
 emails.nixle.com                require_signed  "emails.nixle.com,smtp.nixle.com";
 emails.nwruk.com                require_signed  emails.nwruk.com;
@@ -717,6 +776,7 @@
 email.tastingroom.com           require_signed  email.tastingroom.com;
 email.techmedianetwork.com      require_signed  email.techmedianetwork.com;
 email.teva.com                  require_signed  email.teva.com;
+email.tgw.com                   require_signed  email.tgw.com;
 email.thecompanystore.com       require_signed  "thecompanystore.com,email.thecompanystore.com";
 email.the-cover-store.com       require_signed  email.the-cover-store.com;
 email.ticketmaster.com          require_signed  email.ticketmaster.com;
@@ -726,6 +786,7 @@
 email.travelchannel.com         require_signed  email.travelchannel.com;
 email.travelzoo.com             require_signed  email.travelzoo.com;
 email.ugg.com                   require_signed  email.ugg.com;
+email-unitedconcordia.com       require_signed  email-unitedconcordia.com;
 emailusa.coca-cola.com          require_signed  emailusa.coca-cola.com;
 email.usbank.com                require_signed  email.usbank.com;
 email.vimeo.com                 require_signed  email.vimeo.com;
@@ -748,6 +809,7 @@
 e.match.com                     require_signed  e.match.com;
 embarqcreative.com              require_signed  embarqcreative.com;
 em.bbt.com                      require_signed  em.bbt.com;
+em.bloomstoday.com              require_signed  em.bloomstoday.com;
 em.citizensbank.com             require_signed  em.citizensbank.com;
 em.drugstorenews.com            require_signed  em.drugstorenews.com;
 emerika.com                     require_signed  emerika.com;
@@ -760,19 +822,27 @@
 emilyslist.org                  signed_white    bounce.bluestatedigital.com;    // some unsigned mail via bluestatedigital
 emirates.email                  require_signed  emirates.email;
 emjreviews.com                  require_signed  zcsend.net;
+em.keurig.com                   require_signed  em.keurig.com;
 eml.condenast.com               require_signed  eml.condenast.com;
 em.mandalaybay.com              require_signed  em.mandalaybay.com;
+em.mgcatalog.net                require_signed  em.mgcatalog.net;
 em.mgmnationalharbor.com        require_signed  em.mgmnationalharbor.com;
 em.mgmresorts.com               require_signed  em.mgmresorts.com;
 em.newyorknewyork.com           require_signed  em.newyorknewyork.com;
 em.nordstrom.com                require_signed  em.nordstrom.com;
+em.omnihotels.com               require_signed  em.omnihotels.com;
 e.montblanc.com                 require_signed  e.montblanc.com;
 e.mozilla.org                   require_signed  e.mozilla.org;
+em.penguinrandomhouse.com       require_signed  em.penguinrandomhouse.com;
+em.pinnaclesys.com              require_signed  em.pinnaclesys.com;
+em.princess.com                 require_signed  em.princess.com;
 em.redbox.com                   require_signed  em.redbox.com;
 em.sallybeauty.com              require_signed  em.sallybeauty.com;
 em.searshomeservices.com        require_signed  em.searshomeservices.com;
 em.searspartsdirect.com         require_signed  em.searspartsdirect.com;
+em.sfbcoffee.com                require_signed  sfbcoffee.com;
 ems.travelers.com               require_signed  ems.travelers.com;
+em.target.com                   require_signed  em.target.com;
 e.murad.com                     require_signed  e.murad.com;
 em.vdara.com                    require_signed  em.vdara.com;
 em.venetian.com                 require_signed  em.venetian.com;
@@ -838,7 +908,7 @@
 et.uber.com                     require_signed  et.uber.com;
 e-tui.transunion.com            require_signed  e-tui.transunion.com;
 e.turbotax.intuit.com           require_signed  e.turbotax.intuit.com;
-e.underarmour.com               require_signed  e.underarmour.com;
+e.underarmour.com               require_signed  "*.underarmour.com";
 e.urbanoutfitters.com           require_signed  e.urbanoutfitters.com;
 eurotechsoccer.com              require_signed  icontactmail3.com;
 e.usa.experian.com              require_signed  e.usa.experian.com;
@@ -851,6 +921,7 @@
 everkerr.com                    require_signed  everkerr.com;
 everlane.com                    require_signed  everlane.com;
 everydayhealth.com              require_signed  everydayhealth.com;
+e.vetrifamily.com               require_signed  e.vetrifamily.com;
 e.vitaminshoppe.com             require_signed  e.vitaminshoppe.com;
 e.walgreens.com                 require_signed  e.walgreens.com;
 e.washingtonpost.com            require_signed  e.washingtonpost.com;
@@ -881,10 +952,12 @@
 fanduelmail.com                 require_signed  fanduelmail.com;
 fanshop.mlblists.com            require_signed  fanshop.mlblists.com;
 fans.legacyrecordings.com       require_signed  fans.legacyrecordings.com;
+fantasysports.communications.yahoo.com require_signed  fantasysports.communications.yahoo.com;
+fantomdrives.com                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 farmsanctuary.org               require_signed  mta-bbcspool.convio.net;
 fashionbizinc.org               require_signed  fashionbizinc.ccsend.com;
 fastspring.com                  require_signed  fastspring.com;
-fedbarlive.org                  require_signed  em.secureserver.net;
+fedbarlive.org                  require_signed  "emsend.com,em.secureserver.net";
 fedex.com                       require_signed  fedex.com;
 fedgovconnect.org               require_signed  fedgovconnect-org.20150623.gappssmtp.com;
 feedvisor.com                   require_signed  "feedvisor-com.20150623.gappssmtp.com,feedvisor.com";
@@ -905,10 +978,12 @@
 fladems.com                     signed_white    "fladems.com,bounce.bluestatedigital.com";
 fladems.org                     signed_white    bounce.bluestatedigital.com;
 flagandbanner.com               require_signed  omktmail2.com;
+flagsource.com                  require_signed  flagsource.ccsend.com;
 flaticon.com                    require_signed  "mandrillapp.com,flaticon.com";
 flaviar.com                     require_signed  flaviar.com;
 flickr.com                      require_signed  flickr.com;
 fly.com                         require_signed  fly.com;
+fly.spirit-airlines.com         require_signed  fly.spirit-airlines.com;
 fmidm.com                       signed_white    "fmidm.com,fmidirectmail.onmicrosoft.com";  // some unsigned mail via their own servers
 followmyhealth.com              require_signed  email.followmyhealth.com;
 fontexplorerx.com               signed_white    email.monotype.com;             // some unsigned mail from salesforce
@@ -916,6 +991,7 @@
 footsolutions.com               require_signed  footsolutions.com;
 foreseeresults.com              require_signed  4cresults.com;
 foreupsoftware.com              require_signed  foreupsoftware.com;
+fortispay.com                   require_signed  fortispay.com;
 foxcreative.net                 signed_white    emlr2.com;                      // some unsigned mail via ms outlook
 freeconference.com              require_signed  freeconference.com;
 freedomforallamericans.org      require_signed  bounce.bluestatedigital.com;
@@ -924,6 +1000,7 @@
 fsshelpdesk.org                 require_signed  news.fedhelpdesk.org;
 fult.com                        require_signed  fultonbank.onmicrosoft.com;
 gahmusa.org                     require_signed  gahmusa.org;                    // cgale unsubscribed 2017-06-28
+gahsp.org                       require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 gamechanger.io                  require_signed  gamechanger.io;
 gate1mail.com                   require_signed  gate1mail.com;
 gc.email.amazon.com             require_signed  amazon.com;                     // gift cards
@@ -936,6 +1013,7 @@
 ges.com                         signed_white    "ges.com,viadcorp.onmicrosoft.com";
 getjibjab.com                   require_signed  getjibjab.com;
 ggimageusa.com                  require_signed  "ggimageusa-com.20150623.gappssmtp.com,smtpserver.email,smtpsendmail.com";
+gifts.figis.com                 require_signed  gifts.figis.com;
 gillians.com                    require_signed  gillians.ccsend.com;
 girlscoutsla.org                require_signed  girlscoutsla.org;
 glassdoor.com                   require_signed  glassdoor.com;
@@ -945,6 +1023,7 @@
 godaddy.com                     require_signed  godaddy.com;
 gofundme.com                    require_signed  "gofundme.com,email.gofundme.com";
 go.intervalworld.com            require_signed  go.intervalworld.com;
+go-jsb.com                      require_signed  kpn1210384.onmicrosoft.com;
 gokdm.com                       require_signed  gokdm.ccsend.com;
 gokhalemethod.com               require_signed  gokhalemethod.com;
 googlemail.com                  require_signed  googlemail.com;
@@ -968,6 +1047,7 @@
 greystar.com                    require_signed  "greystar365.onmicrosoft.com,entrata.com";
 grizzly.com                     require_signed  grizzly.com;
 groove3.com                     require_signed  groove3.com;
+grove.co                        require_signed  grove.co;
 grundoon.net                    require_signed  grundoon.onmicrosoft.com;
 gsa-cms.com                     require_signed  gsa-cms.com;
 gsb.columbia.edu                require_signed  "columbiabusiness.onmicrosoft.com,icontactmail2.com";
@@ -982,11 +1062,14 @@
 harborfreight.com               require_signed  harborfreight-com.20150623.gappssmtp.com;
 harborfreightemail.com          require_signed  harborfreightemail.com;
 hardrockhotelsd.com             require_signed  zmaildirect.com;
+hardywindows.com                require_signed  hardywindows.onmicrosoft.com;
 harley-davidson.rsys2.com       require_signed  rsys2.com;
 harryanddavid-email.com         require_signed  harryanddavid-email.com;
 harting.com                     require_signed  mktroute.com;
+harvestseasonalgrill.com        require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 hauptwerk.com                   require_signed  hauptwerk.com;
 havenadoptions.com              require_signed  havenadoptions-com.20150623.gappssmtp.com;
+hawkemedia.com                  require_signed  hawkemedia.com;
 hbham.com                       require_signed  hbham.com;
 hcconstructors.com              require_signed  pwcusa.ccsend.com;
 healthcarefinancenews.com       require_signed  healthcarefinancenews.com;
@@ -1016,7 +1099,7 @@
 hive.com                        require_signed  "hive.com,hive-com.20150623.gappssmtp.com";
 hmc.edu                         require_signed  hmc2.onmicrosoft.com;
 holosonics.com                  require_signed  holosonics.ccsend.com;
-holts.com                       require_signed  icontactmail1.com;
+holts.com                       signed_white    icontactmail1.com;              // some unsigned mail from their own web server with no reverse dns not listed in their spf record
 homeaway.com                    require_signed  homeaway.com;
 homedepot.com                   signed_white    homedepot.com;                  // some unsigned mail via salesforce from customer service
 home-mail.sophos.com            require_signed  home.sophos.com;
@@ -1029,6 +1112,7 @@
 houzz.com                       require_signed  houzz.com;
 hq.acm.org                      require_signed  acmhq.onmicrosoft.com;
 htallc.com                      require_signed  "smtpsendmail.com,smtp.com";
+hubs.com                        require_signed  hubs.com;
 hulumail.com                    require_signed  hulumail.com;
 hungryroot.com                  require_signed  "hungryroot.com,email.hungryroot.com";
 huntingpa.com                   require_signed  huntingpa.com;
@@ -1052,6 +1136,7 @@
 improvementscatalog-email.com   require_signed  improvementscatalog-email.com;
 imt-mach.com                    require_signed  imt-mach.com;
 inbound.com                     require_signed  inbound.com;
+inbox.bissell.com               require_signed  inbox.bissell.com;
 inc2gov.com                     require_signed  "smtp.com,smtpsend.com";
 industrymarketingsolutions.com  require_signed  mail-202-169.rm0005.net;
 infinitytools.com               require_signed  infinitytools.ccsend.com;
@@ -1077,6 +1162,7 @@
 insideapple.apple.com           require_signed  insideapple.apple.com;
 insideradio.com                 require_signed  e2ma.net;
 inspire.pinterest.com           require_signed  inspire.pinterest.com;
+inspireschools.org              require_signed  inspireschools-org.20150623.gappssmtp.com;
 intacct.com                     require_signed  intacct.com;
 interactone.com                 require_signed  "mx-senderer-02.com,mx-senderer-03.com";
 interior-specialties.com        signed_white    "appriver3651009419.onmicrosoft.com,smtpcorp.com";
@@ -1088,11 +1174,13 @@
 invista.com                     signed_white    "invista.com,kochind.onmicrosoft.com";  // some broken signatures from microsoft via pphosted
 invntree.com                    require_signed  invntree.com;
 ipipeline.com                   require_signed  ipipeline.onmicrosoft.com;
+ipushtech.com                   require_signed  pushtech.onmicrosoft.com;
 iriworldwide.com                require_signed  iriworldwide.com;
 ismgcorp.com                    require_signed  ismgcorp.com;
 ispringmail.com                 require_signed  ispringmail.com;
 issuumail.com                   require_signed  issuumail.com;
 ithirings.com                   require_signed  messaging-master.net;
+iupdate.dnb.com                 require_signed  dnb.com;
 jackseeds.com                   require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 jacpac.org                      require_signed  jacpac.ccsend.com;
 jameco.com                      require_signed  jameco.com;
@@ -1103,7 +1191,7 @@
 jenjudge.com                    require_signed  emlr2.com;
 jet.com                         signed_white    jet.com;                        // some unsigned mail from mailchimp that fails spf
 jewelscent.com                  require_signed  delivery.klaviyomail.com;
-jewishphilly.org                require_signed  "auth.ccsend.com,jewishphilly.ccsend.com,jewishphilly-org.20150623.gappssmtp.com";
+jewishphilly.org                require_signed  "aweber.com,auth.ccsend.com,jewishphilly.ccsend.com,jewishphilly-org.20150623.gappssmtp.com";
 jhu.edu                         signed_white    "e2ma.net,publicaster.com,bsftransmit7.com,armssoftware.com";     // possibly other signers
 jibjab.com                      require_signed  jibjab.com;
 jimjohnson4governor.com         require_signed  bounce.bluestatedigital.com;
@@ -1111,6 +1199,8 @@
 job.alerted.org                 require_signed  job.alerted.org;
 jobrapidoalert.com              require_signed  jobrapidoalert.com;
 jobs2careers.com                require_signed  jobs2careers.com;
+jobs.cl.alerted.org             require_signed  cl.alerted.org;
+jobs.fbg.alerted.org            require_signed  fbg.alerted.org;
 jobs.mpr.alerted.org            require_signed  mpr.alerted.org;
 johncanningco.com               require_signed  spsend.com;
 johnmaxwell.com                 require_signed  email.johnmaxwell.com;
@@ -1133,6 +1223,7 @@
 kerio.com                       require_signed  kerio.com;
 keswicktheatre.com              signed_white    keswicktheatre.ccsend.com;      // some unsigned mail from their own servers
 keystoneline.com                require_signed  keystoneline.ccsend.com;
+kftv.com                        require_signed  kftv.com;
 kik.com                         require_signed  action.kik.com;
 kingarthurflour.com             require_signed  kingarthurflour.com;
 knoll.com                       require_signed  knoll.com;
@@ -1149,19 +1240,21 @@
 ladygrace.com                   require_signed  ladygrace.com;
 lakearrowheadchamber.com        signed_white    lakearrowhead.ccsend.com;       // some unsigned mail via unifiedlayer.com
 landarq.com                     require_signed  landarq-com.20150623.gappssmtp.com;
-lanierlawfirm.com               require_signed  cmail20.com;
+lanierlawfirm.com               require_signed  "cmail19.com,cmail20.com";
 laopera.org                     require_signed  "laopera.org,laopera.onmicrosoft.com";
-largeformatreview.com           require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+largeformatreview.com           require_signed  "amazonses.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 larryjohnsonspeaker.com         require_signed  priorityoneemail.com;
 latinworks.com                  require_signed  latinworks.onmicrosoft.com;
 law360.com                      require_signed  "law360.com,mailings-alt.law360.com";
 lawline.com                     require_signed  icontactmail1.com;
 lawreviewcle.com                require_signed  lawreviewcle.com;
+law.stanford.edu                require_signed  "cmail19.com,cmail20.com";
 lawyertechinfo.com              require_signed  "icontactmail2.com,icontactmail6.com";
 lazorlaw.com                    require_signed  johnlazor.onmicrosoft.com;
-lbccc.org                       require_signed  lbccc.ccsend.com;
+lbccc.org                       require_signed  "lbccc.ccsend.com,www-lbccc.ccsend.com";
 lcius.com                       require_signed  lcius.onmicrosoft.com;
 ledbury.com                     require_signed  ledbury.com;
+ledgerwallet.com                require_signed  smtp.groovehq.com;
 leerburg.com                    require_signed  amazonses.com;
 legalnewsupdate.com             require_signed  legalnewsupdate.ccsend.com;
 legrand.us                      require_signed  grpleg.onmicrosoft.com;
@@ -1174,6 +1267,7 @@
 libertyheadlines.com            require_signed  libertyheadlines.com;
 libertymutual.com               signed_white    libertymutual.com;              // some unsigned mail from their own servers
 lifeandstylemag.com             require_signed  lifeandstylemag.com;
+lifelock.com                    require_signed  lifelock.com;
 lightblocks.com                 require_signed  triggeredemailservice.com;
 lightyearmg.com                 require_signed  lightyearmg-com.20150623.gappssmtp.com;
 lillarogers.com                 require_signed  lillarogers.ccsend.com;
@@ -1197,6 +1291,7 @@
 lovethe88.com                   require_signed  lovethe88-com.20150623.gappssmtp.com;
 loyaltyalliance.com             require_signed  "loyaltyalliance.com,mx-senderer-02.com,mx-senderer-03.com";
 loyalty.bloomingdales.com       require_signed  loyalty.bloomingdales.com;
+lpl.com                         require_signed  lpl.com;
 lqa.com                         require_signed  cp20.com;
 l.soma.com                      require_signed  l.soma.com;
 ltsc.ucsb.edu                   require_signed  ltsc.ucsb.edu;
@@ -1211,16 +1306,19 @@
 maakenterprises.com             require_signed  maakenterprises.com;
 machinezone.com                 require_signed  machinezone.com;
 macsales.com                    require_signed  macsales.com;
+magicjack.com                   require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 magnaplate.com                  require_signed  magnaplate.com;
 mag.southernliving.com          require_signed  mag.southernliving.com;
 mail-1.bizjournals.com          require_signed  bizjournals.com;
 mail1.wellsfargo.com            require_signed  mail1.wellsfargo.com;
 mail2.gofarrewards.wellsfargo.com require_signed  mail2.gofarrewards.wellsfargo.com;
+mail2.wellsfargo.com            require_signed  mail2.wellsfargo.com;
 mail5.avvo.com                  require_signed  mail5.avvo.com;
 mail7.creditkarma.com           require_signed  mail.creditkarma.com;
 mail.accounts.autodesk.com      require_signed  email.accounts.autodesk.com;
 mail.authorize.net              require_signed  mail.authorize.net;
 mail.bloombergbusiness.com      require_signed  mail.bloombergbusiness.com;
+mail.brylanehome.com            require_signed  mail.brylanehome.com;
 mailcenter.usaa.com             require_signed  usaa.com;
 mail.change.org                 require_signed  mail.change.org;
 mailchimp.com                   require_signed  mailchimp.com;
@@ -1234,10 +1332,12 @@
 mail.eviteideas.com             require_signed  mail.eviteideas.com;
 mail.farmers.com                require_signed  mail.farmers.com;
 mail.glassdoor.com              require_signed  mail.glassdoor.com;
+mail.goodreads.com              require_signed  goodreads.com;
 mailhost.docuhost-net.com       require_signed  mailhost.docuhost-net.com;
 mail.hotels.com                 require_signed  mail.hotels.com;
 mail.imparture.us               require_signed  mail.imparture.us;
 mail.instagram.com              require_signed  mail.instagram.com;
+mail.lotsahelpinghands.com      require_signed  mail.lotsahelpinghands.com;
 mail.medscape.com               require_signed  mail.medscape.com;
 mail.mlblists.com               require_signed  mail.mlblists.com;
 mail.onedrive.com               require_signed  mail.onedrive.com;
@@ -1250,15 +1350,20 @@
 mail.rejuvenation.com           require_signed  mail.rejuvenation.com;
 mail.remind.com                 require_signed  remind.com;
 mailreply.selectcomfort.com     require_signed  mailreply.selectcomfort.com;
+mails.avg.com                   require_signed  mails.avg.com;
+mail-saw.com                    require_signed  mail-saw.com;
+mail.scribd.com                 require_signed  "mail.scribd.com,bounceexchange.com";
 mail.service.thehartford.com    require_signed  mail.service.thehartford.com;
 mail.sharecare.com              require_signed  mail.sharecare.com;
 mail.sling.com                  require_signed  mail.sling.com;
 mail.society6.com               require_signed  mail.society6.com;
 mail.southcommmail.com          require_signed  mail.southcommmail.com;
 mail.stashrewards.com           require_signed  mail.stashrewards.com;
+mail.statefarm.com              require_signed  mail.statefarm.com;
 mail.synchronybank.com          require_signed  mail.synchronybank.com;
 mail.synchronyfinancial.com     require_signed  mail.synchronyfinancial.com;
 mailva.evite.com                require_signed  mailva.evite.com;
+mail.vividseats.com             require_signed  mail.vividseats.com;
 mail.vresp.com                  require_signed  vresp.com;
 mail.westelm.com                require_signed  mail.westelm.com;
 mail.whitehouse.gov             require_signed  mail.whitehouse.gov;
@@ -1282,8 +1387,10 @@
 martindalenolo.com              require_signed  martindalenolo.com;
 mastrocomm.com                  require_signed  twisteddune.ccsend.com;
 matildajaneclothing-email.com   require_signed  matildajaneclothing-email.com;
+matterhackers.com               require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 maxpedition.com                 require_signed  icontactmail1.com;
 mayo.edu                        signed_white    mayoclinic.com;                 // some unsigned via blackbaud (mailing list?), no spf record
+mcfinc.com                      require_signed  "mortgage-email.com,mcfinc-com.20150623.gappssmtp.com";
 mcmorrowreports.com             require_signed  mcmorrowreport.ccsend.com;
 mcnichols.com                   require_signed  "mcnichols-com.20150623.gappssmtp.com,bronto.com";
 mcsservices.com                 require_signed  mcsservicesinc.onmicrosoft.com;
@@ -1310,8 +1417,10 @@
 message.fedex.com               require_signed  message.fedex.com;
 message.merrilledge.com         require_signed  message.merrilledge.com;
 messages.autotrader.com         require_signed  messages.autotrader.com;
+messages.cancer.org             require_signed  messages.cancer.org;
 message.scholastic.com          require_signed  message.scholastic.com;
 messages.cutco.com              require_signed  messages.cutco.com;
+message.sema.org                require_signed  message.sema.org;
 messages.globalindustrial.com   require_signed  messages.globalindustrial.com;
 messages.homeaway.com           require_signed  messages.homeaway.com;
 messages.kbb.com                require_signed  messages.kbb.com;
@@ -1339,16 +1448,20 @@
 miraclesuit.com                 require_signed  miraclesuit.com;
 ml.com                          require_signed  ct-mail.ml.com;
 mlivenyc.com                    require_signed  cvent-planner.com;
+m.mail.coursera.org             require_signed  m.mail.coursera.org;
 mmsonline.com                   require_signed  mmsonline.com;
 mobiletechinc.com               require_signed  mobiletechinc.onmicrosoft.com;
 mobivity.com                    require_signed  mobivity.com;
+modernmsg.com                   require_signed  "modernmsg.com,delivery.customeriomail.com";
 moes.com                        require_signed  email.punchh.com;
 momentumdash.com                require_signed  momentumdash.com;
 momentummgt.com                 require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 momscleanairforce.org           require_signed  server8839.e-activist.com;
+monotype.com                    require_signed  monotype.com;
 monster.com                     signed_white    monster.com;                    // some unsigned mail via mailsorter.be.tmpw.net;
 monsterequip.com                require_signed  icontactmail6.com;
 monsterscooterparts.com         require_signed  monsterscooterparts.com;
+morning7.theskimm.com           require_signed  morning7.theskimm.com;
 morrishabitat.org               require_signed  morrishabitat.ccsend.com;
 mortgagebankamerica.com         require_signed  emarketfocus.com;
 mosacks.com                     require_signed  mg.mosacks.com;
@@ -1356,11 +1469,13 @@
 movavi.com                      require_signed  "mandrillapp.com,movavi.com";
 moveon.org                      require_signed  list.moveon.org;
 movies.fandango.com             require_signed  movies.fandango.com;
+movies.fandangonow.com          require_signed  movies.fandangonow.com;
 mp1.tripadvisor.com             require_signed  mp1.tripadvisor.com;
 mp.fitbit.com                   require_signed  mp.fitbit.com;
 mpma.net                        require_signed  mpma.ccsend.com;
 mrca.org                        require_signed  "smtpsendmail.com,smtp.com";
-mrtireservices.com              require_signed  mrtireservices.com;
+mrtireservice.info              require_signed  mrtireservice.info;
+mrtireservices.com              require_signed  "mrtireservices.com,mrtireservice.info";
 msccruisesusa.com               require_signed  contactlab.it;
 msmtvsales.com                  require_signed  iheartmedia.onmicrosoft.com;
 m.taxslayer.com                 require_signed  m.taxslayer.com;
@@ -1371,6 +1486,7 @@
 murphy4nj.com                   require_signed  "murphy4nj-com.20150623.gappssmtp.com,bounce.bluestatedigital.com";
 murphyforflorida.com            signed_white    bounce.bluestatedigital.com;
 musicacademy.org                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+musictoday.com                  require_signed  mg.musictoday.com;
 musictogether.com               signed_white    musictogether.ccsend.com;       // some unsigned mail via mail.musictogether.com;
 mvsend.com                      require_signed  mvsend.com;
 mxtoolbox.com                   require_signed  mxtoolbox.com;
@@ -1379,7 +1495,7 @@
 my.erau.edu                     require_signed  myerauedu.onmicrosoft.com;
 myfinancialbodyguard.com        require_signed  myfinancialbodyguard-com.20150623.gappssmtp.com;
 myfitnesspal.com                require_signed  myfitnesspal.com;
-myhealth.stanfordhealthcare.org require_signed  stanfordhealthcare.onmicrosoft.com;
+myhealth.stanfordhealthcare.org require_signed  "stanfordhealthcare.org,stanfordhealthcare.onmicrosoft.com";
 myiclubonline.com               require_signed  amazonses.com;
 myicontickets.com               require_signed  infusionmail.com;
 mymaryandmartha.com             require_signed  mymaryandmartha.com;
@@ -1414,6 +1530,7 @@
 neilsonmarketing.com            require_signed  icontactmail2.com;
 nejm.org                        require_signed  nejm.org;
 nemanet.org                     signed_white    nemanet.ccsend.com;             // some unsigned mail via kintera.com
+netgear.com                     require_signed  netgear.com;
 networkafterwork.com            require_signed  networkafterwork.com;
 neuropathytreatmentgroup.com    require_signed  neuropathytreatmentgroup.com;
 newbay-media.com                require_signed  "newbay.cfmvmail.com,newbay2.cfmvmail.com";
@@ -1425,6 +1542,7 @@
 news.classiccarrestorationclub.com require_signed  news.classiccarrestorationclub.com;
 news.gucci.com                  require_signed  "news.gucci.com,contactlab.it";
 news.healthylifestylearena.com  require_signed  news.healthylifestylearena.com;
+news.hellofresh.com             require_signed  news.hellofresh.com;
 news.hickoryfarms.com           require_signed  news.hickoryfarms.com;
 newsletter.247sports.com        require_signed  newsletter.247sports.com;
 newsletter.mail.moneyandmarkets.com require_signed  newsletter.mail.moneyandmarkets.com;
@@ -1445,6 +1563,7 @@
 news.tinyprints.com             require_signed  news.tinyprints.com;
 news.united.com                 require_signed  news.united.com;
 news.weddingpaperdivas.com      require_signed  news.weddingpaperdivas.com;
+news.wwgoa.com                  require_signed  news.wwgoa.com;
 newwavetech.com                 signed_white    icontactmail3.com;              // some unsigned mail directly from their servers
 nexcopy.com                     require_signed  nexcopy-com.20150623.gappssmtp.com;
 nextdayflyers.com               require_signed  nextdayflyers.com;
@@ -1457,9 +1576,12 @@
 njbiz.com                       require_signed  "journalpub1.onmicrosoft.com,njbiz.com";
 njsba.com                       signed_white    "njsba.com,bluehornet.com";     // some broken signatures from bluehornet
 nlmdlr.com                      require_signed  pool01.imakenews.net;
+nmajh.org                       require_signed  nmajh.ccsend.com;
 nmk.printegra.com               require_signed  nmk.printegra.com;
+nordstrom.com                   require_signed  nordstrom.com;
 noreply1.ebay.com               require_signed  ebay.com;
 noreply.autodesk.com            require_signed  noreply.autodesk.com;
+noreply.email.carfax.com        require_signed  email.carfax.com;
 noreply.org                     signed_black    sendgrid.net;                   // apple support scam
 noreply.stockwatch.com          require_signed  noreply.stockwatch.com;
 northcountryrivers.com          require_signed  northcountryrivers.ccsend.com;
@@ -1476,7 +1598,9 @@
 novitex.com                     require_signed  pbmsnovitex.onmicrosoft.com;
 npm.org                         require_signed  "npm-org.20150623.gappssmtp.com,smtp.com";
 nrailafrontlines.com            require_signed  nrailafrontlines.com;
+nrdc.org                        require_signed  nrdc1.onmicrosoft.com;
 nsbaadvocate.com                require_signed  mmsend.com;
+ntlpartner.com                  require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 nyiad.edu                       require_signed  icontactmail1.com;
 oakwoodveneer.com               require_signed  em.secureserver.net;
 ocusoft.com                     require_signed  "cmail19.com,cmail20,com";
@@ -1490,7 +1614,9 @@
 offers.dominos.com              require_signed  offers.dominos.com;
 offer.snapfish.com              require_signed  offer.snapfish.com;
 offers.princess.com             require_signed  offers.princess.com;
+officialpoc.com                 require_signed  smtpsend.com;                   // sam registration stuff
 offset.com                      require_signed  offset.com;
+ogjo-media.com                  require_signed  ogjo-media.com;                 // pennwell for neal
 ogunquitplayhouse.org           require_signed  ogunquitplayhouse.org;
 oldnavy.com                     require_signed  oldnavy.com;
 olmcatholicschool.com           require_signed  "olmcatholicschool-com.20150623.gappssmtp.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
@@ -1500,7 +1626,9 @@
 online.costco.com               require_signed  online.costco.com;
 online.essentra.com             require_signed  online.essentra.com;
 onmogul.com                     require_signed  onmogul.com;
+onpeak.com                      require_signed  "onpeak.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 onvia.com                       require_signed  onvia.com;
+oo-software.com                 require_signed  oo-software.com;
 opayq.com                       require_signed  opayq.com;
 openemail.americanexpress.com   require_signed  openemail.americanexpress.com;
 opentable.com                   require_signed  "opentable.com,contact.opentable.com";
@@ -1524,6 +1652,7 @@
 outfrontmedia.com               require_signed  cbsoa.onmicrosoft.com;
 outsiderclub.com                require_signed  "outsiderclub.com,bluehornet.com";
 outsource.com                   require_signed  outsource.com;
+overnightkitchens.com           require_signed  overnightkitchens.com;
 overstock.com                   require_signed  overstock.com;
 ownerreminders.com              require_signed  ownerreminders.com;
 p66.com                         require_signed  p66.com;
@@ -1537,11 +1666,13 @@
 paloma.washingtonpost.com       require_signed  paloma.washingtonpost.com;
 pandora.com                     signed_white    "pandora.com,sg.pandora.com";   // some unsigned mail directly from pandora mail servers
 paperlesspost.com               require_signed  "paperlesspost.com,*.paperlesspost.com";
+paradigmimaging.com             require_signed  "store.smtp.bigcommerce.net,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 parallels-universe.com          require_signed  parallels-universe.com;
 paramountsign.com               require_signed  "email.shopvox.com,paramountsign-com.20150623.gappssmtp.com"
 parcelpending.com               require_signed  parcelpending.com;
 parkrideflyusa.com              require_signed  "yo155.com,publicaster.com,bsftransmit7.com";
 partsgeek.com                   require_signed  "smtpserver.email,smtpsendmail.com,partsgeek.ccsend.com";
+pasadenarose.com                require_signed  "pasadenarose-com.20150623.gappssmtp.com,pasadenamonthly.ccsend.com";
 pastorrick.com                  require_signed  bluehornet.com;
 patientconnect365.com           require_signed  patientconnect365.com;
 patients.pgsurveying.com        require_signed  patients.pgsurveying.com;
@@ -1550,6 +1681,7 @@
 patriotvideos.net               require_signed  patriotvideos.net;
 pay.amazon.com                  require_signed  amazon.com;
 paychex.com                     require_signed  paychex.com;
+paylocity.com                   require_signed  paylocity.com;
 paypal.com                      require_signed  paypal.com;
 payproglobal.com                require_signed  email.payproglobal.com;
 payrollcentric.com              require_signed  "smtpserver.email,smtpsendmail.com,smtp.com,em.evolutionhcm.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
@@ -1560,38 +1692,44 @@
 pennsylvanialotteryemail.com    require_signed  pennsylvanialotteryemail.com;
 pennsys.com                     signed_white    quosal.com;                     // some unsigned mail
 penske.com                      require_signed  penske.com;
+peralta.edu                     require_signed  peralta4.onmicrosoft.com;
 perfectpractice.com             require_signed  www-perfectpractice.ccsend.com;
 perkspot.com                    require_signed  perkspot.com;
 perrinconferences.com           require_signed  perrinconferences.ccsend.com;
 petmountain.com                 require_signed  petmountain.com;
-petro-media.com                 require_signed  petro-media.com;
+petro-media.com                 require_signed  petro-media.com;                // pennwell for neal
 pfizer.com                      require_signed  "pfizer.com,yrb.onmicrosoft.com";
 pgisports.com                   require_signed  infusionmail.com;
 pharmacy.cvs.com                require_signed  pharmacy.cvs.com;
+p.healthandwellnessalerts.berkeley.edu require_signed  p.healthandwellnessalerts.berkeley.edu;
 phelpsmediagroup.com            require_signed  "phelpsmediagroup.ccsend.com,auth.ccsend.com";
 philadelphiarunner.com          require_signed  philadelphiarunner.ccsend.com;
 phila.gov                       signed_white    "phila.onmicrosoft.com,auth.ccsend.com";    // unsigned via exacttarget not listed in their spf record
 philamuseum.org                 signed_white    "cmail19.com,cmail20.com";      // some unsigned mail via outlook
 phillyleagues.com               require_signed  phillyleagues.ccsend.com;
 phillynewssubscriptionservices.com      require_signed  phillynewssubscriptionservices.com;
+phillypaws.org                  require_signed  icontactmail9.com;
 phillypops.org                  require_signed  phillypops.org;
 phillytrib.com                  require_signed  phillytrib.com;
+philmontcc.org                  require_signed  philmontcc.org;
 philorch.org                    require_signed  philorch.org;
 photoemail.walgreens.com        require_signed  photoemail.walgreens.com;
+piab.com                        require_signed  piab.com;
 pianet.org                      require_signed  "moon-ray.com,mmsend.com";
+pimed.com                       require_signed  lists.jobsonmail.com;
 pimhendriksen.com               require_signed  emlr2.com;
 pinebrookroasters.com           require_signed  netorgft1374413.onmicrosoft.com;
 pipmag.com                      require_signed  pipmag.com;
 plaintiffsolutionscenter.com    require_signed  plaintiffsolutionscenter.ccsend.com;
 plaintiffsolutions.com          require_signed  thelienresolutiongroup.ccsend.com;
+planetcyclery.com               require_signed  sendgrid.net;
 pmc.com                         require_signed  pmc.com;
 pmrgi.com                       require_signed  cvent-planner.com;
 pods.com                        require_signed  pods.com;
-polsinelli.com                  require_signed  polsinelli.com;             // unsigned spam burst joe-job
 pond5.com                       require_signed  e.pond5.com;
 poolhost.com                    require_signed  poolhost.com;
 popmoney.com                    require_signed  popmoney.com;
-popsugar.com                    require_signed  "popsugar.com,auth.ccsend.com";
+popsugar.com                    signed_white    "popsugar.com,auth.ccsend.com"; // unsigned mail via netsuite
 postergarden.com                require_signed  postergarden.com;
 powell.com                      require_signed  powell.com;
 ppfa.org                        require_signed  ppfa.org;
@@ -1604,11 +1742,14 @@
 princetheater.org               signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 printavo.com                    require_signed  printavo.com;
 printmediamn.com                require_signed  northlightcolor.ccsend.com;
+privy.com                       require_signed  privy.com;
 procerahealth.com               require_signed  "procerahealth.com,auth.ccsend.com";
 procureware.com                 require_signed  procureware.com;
 producersesourcenews.com        require_signed  producersesourcenews.com;
+productionmachining.com         require_signed  productionmachining.com;
 progressiveagent.com            require_signed  b2b-mail.net;
 proofhq.com                     require_signed  proofhq.com;
+prop.trulia.com                 require_signed  prop.trulia.com;
 protradertoday.com              require_signed  protradertoday.com;
 providesupport.com              require_signed  providesupport.com;
 proxyvote.com                   require_signed  proxyvote.com;
@@ -1624,6 +1765,7 @@
 public.govdelivery.com          require_signed  public.govdelivery.com;
 pub.mediadc.com                 require_signed  pub.mediadc.com;
 pub.zinio.com                   require_signed  pub.zinio.com;
+pugnationla.org                 require_signed  elasticemail.com;
 pumpitupfun.com                 require_signed  email.pumpitupfun.com;
 purewow.com                     require_signed  purewow.com;
 pvpusd.net                      require_signed  pvpusd.onmicrosoft.com;
@@ -1642,12 +1784,14 @@
 rallypoint.com                  require_signed  rallypoint.com;
 randjsc.com                     require_signed  randjsc.onmicrosoft.com;
 randpac.com                     require_signed  bluehornet.com;
+randybryceforcongress.com       require_signed  bounce.bluestatedigital.com;
 rapidnews.com                   require_signed  "rapidnews-com.20150623.gappssmtp.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 ravepro.com                     require_signed  icontactmail1.com;
 rbc.com.pa                      require_signed  "rbc-com-pa.20150623.gappssmtp.com,mpdkim2.ch";
 rcam.target.com                 require_signed  rcam.target.com;
 realage-mail.com                require_signed  realage-mail.com;
 recordreform.com                require_signed  medquest.ccsend.com;
+reddit.com                      require_signed  reddit.com;
 refinery29.com                  require_signed  "refinery29.com,refinery29-com.20150623.gappssmtp.com";
 regus.com                       require_signed  "regus.com,mandrillapp.com";
 rel1.aeroplan.com               require_signed  rel1.aeroplan.com;
@@ -1665,8 +1809,10 @@
 rentlooker.site                 require_signed  amazonses.com;
 replies.charlestyrwhitt.com     require_signed  replies.charlestyrwhitt.com;
 reply1.ebay.com                 require_signed  reply1.ebay.com;
+reply.boltonpac.com             require_signed  reply.boltonpac.com;
 reply.broadwaydiscounts.com     require_signed  reply.broadwaydiscounts.com;
 reply.bronto.com                require_signed  bronto.com;
+reply.ebay.com                  require_signed  ebay.com;
 reply.gopinsiderbrief.com       require_signed  reply.gopinsiderbrief.com;
 reply.harrietcarter.com         require_signed  reply.harrietcarter.com;
 reply.medixselect.com           require_signed  reply.medixselect.com;
@@ -1703,7 +1849,9 @@
 rt.email.aa.com                 require_signed  rt.email.aa.com;
 rubinproperties.com             require_signed  rubinproperties-com.20150623.gappssmtp.com;
 ruthschrismail.com              require_signed  ruthschrismail.com;
+rwealthmanagement.com           require_signed  rwealthmanagement-com.20150623.gappssmtp.com;
 rxhealthalerts.com              require_signed  rxhealthalerts.com;
+rxorder.walgreens.com           require_signed  rxorder.walgreens.com;
 safehome.adt.com                require_signed  safehome.adt.com;
 salamanderhotels.com            require_signed  salamanderhotels.com;
 salamanderresort.com            require_signed  "salamanderresort.com,salamanderhotels.com";
@@ -1720,9 +1868,11 @@
 scoremorerewards.com            require_signed  scoremorerewards.com;
 scoutbook.com                   require_signed  scoutbook.com;
 scoutmob.com                    require_signed  scoutmob.com;
+scup.org                        require_signed  em.secureserver.net;
 sdi.com                         require_signed  sdi2.onmicrosoft.com;
 seatgeek.com                    require_signed  seatgeek.com;
 seatme.com                      require_signed  seatme.com;
+secondstreet.com                require_signed  secondstreet.com;
 securedata-trans.com            require_signed  mg.securedata-trans.com;
 secure.norton.com               require_signed  secure.norton.com;
 secureserver.net                require_signed  em.secureserver.net;
@@ -1747,7 +1897,7 @@
 sf-notifications.com            require_signed  email.sf-notifications.com;
 sft.alerted.org                 require_signed  sft.alerted.org;
 sg.booking.com                  require_signed  "booking.com,sg.booking.com";
-sgia.org                        require_signed  "sgia.org,sp01.hubspotemail.net";
+sgia.org                        require_signed  "sgia.org,*.hubspotemail.net";
 shadesoflight.com               require_signed  shadesoflight.com;
 shapingahealthylife.com         require_signed  weebly.com;
 shermanstravel.com              require_signed  shermanstravel.com;
@@ -1755,7 +1905,7 @@
 shipsticks.com                  require_signed  shipsticks.com;
 shop.adorama.com                require_signed  shop.adorama.com;
 shopassociation.org             require_signed  bluehornet.com;
-shopbecker.com                  require_signed  shopbecker.ccsend.com;
+shopbecker.com                  require_signed  "shopbecker.ccsend.com,amazonses.com";
 shop.c21stores.com              require_signed  shop.c21stores.com;
 shopcandelabra.com              require_signed  shopcandelabra.ccsend.com;
 shopdeluxe.com                  require_signed  deluxe.onmicrosoft.com;
@@ -1783,6 +1933,7 @@
 skillsurvey.com                 require_signed  skillsurvey.com;
 skuvault.com                    require_signed  skuvault.com;
 slinfo.pptsend02.com            require_signed  slinfo.pptsend02.com;
+s.logmein.com                   require_signed  s.logmein.com;
 smartpros.com                   require_signed  smartpros.com;
 smart-shopping.thredup.com      require_signed  smart-shopping.thredup.com;
 smathersandbranson.com          require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
@@ -1798,22 +1949,25 @@
 socialsecurityworks.org         require_signed  sg.actionnetwork.org;
 socksaddict.com                 require_signed  bronto.com;
 sony.com                        signed_white    sony.onmicrosoft.com;           // some unsigned mail via lightpath
-sos.ca.gov                      require_signed  californiagold.onmicrosoft.com;
+sos.ca.gov                      require_signed  "californiagold.onmicrosoft.com,auth.ccsend.com";
 sourcelink.com                  require_signed  sourcelink.com;
 sourceone.nazdar.com            require_signed  reachmail.net;
 sovos.com                       signed_white    sovos.com;                      // some unsigned mail via ms outlook
 specialolympics.org             signed_white    bounce.bluestatedigital.com;
+specialty-freight.com           require_signed  specialty-freight.com;
 spglobal.com                    require_signed  spglobal.com;
 spiceworks.com                  require_signed  spiceworks.com;
 splitly.com                     require_signed  splitly.com;
 spotify.com                     require_signed  spotify.com;
 springer.com                    require_signed  springer.com;
 springeronline.com              require_signed  springeronline.com;
+sprint.delivery.net             require_signed  sprint.delivery.net;
 squarespace.com                 require_signed  squarespace.com;
 ssa.gov                         require_signed  ssa.gov;
 ssmhealth.com                   require_signed  ssmhealth.onmicrosoft.com;
 st94.com                        signed_white    st94.ccsend.com;
 stackforpa.com                  require_signed  bounce.bluestatedigital.com;
+stambaughness.com               require_signed  stambaughness.ccsend.com;
 standard.com                    require_signed  standard.com;
 standunited.org                 require_signed  "standunited.org,mailings.standunited.org";
 stanford.edu                    require_signed  "stanford.edu,office365stanford.onmicrosoft.com";
@@ -1821,6 +1975,7 @@
 staplesadvantage.com            require_signed  yotpo.com;
 staples.com                     signed_white    "ussicorp5.onmicrosoft.com,mktroute.com";   // some unsigned mail via salesforce
 statefarminfo.com               require_signed  statefarminfo.com;
+state.gov                       require_signed  state.gov;
 state.mn.us                     require_signed  mn365.onmicrosoft.com;
 statnews.com                    require_signed  "statnews.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 steeleassetmanagement.net       require_signed  gmail.com;
@@ -1835,6 +1990,7 @@
 style.letote.com                require_signed  style.letote.com;
 subscriptions.gaia.com          require_signed  subscriptions.gaia.com;
 subscriptions.ssa.gov           require_signed  subscriptions.ssa.gov;
+suggestedjobs.com               require_signed  suggestedjobs.com;
 suntrust.com                    require_signed  suntrust.com;
 superbrightleds.com             require_signed  "superbrightleds.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 superflypresents.com            signed_white    superflypresents.com;           // also from mailchimp, not listed in their spf record
@@ -1853,9 +2009,11 @@
 sweet.ediblearrangements.com    require_signed  sweet.ediblearrangements.com;
 sweetwater.com                  require_signed  sweetwater.com;
 swimstyle.com                   require_signed  swimstyle.com;
+swimsuitsforall.com             require_signed  swimsuitsforall.com;
 swmobileservice.com             require_signed  swmobileservice-com.20150623.gappssmtp.com;
 sxsw.com                        require_signed  "sxsw.com,mmxreservations.com";
 symantec.rsys2.com              require_signed  rsys2.com;
+synergem.com                    require_signed  synergem-com.20150623.gappssmtp.com;
 syvchorale.org                  require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 talend.com                      require_signed  talend.com;
 talentsmartnewsletter.com       require_signed  email.talentsmartnewsletter.com;
@@ -1876,12 +2034,14 @@
 textnow.me                      require_signed  textnow.me;
 thankyou.citibank.com           require_signed  thankyou.citibank.com;
 thankyouemails.org              require_signed  thankyouemails.org;
+theaddictedlawyer.com           require_signed  theaddictedlawyer.com;
 theatre.info.cinemark.com       require_signed  theatre.info.cinemark.com;
 thechivery.com                  require_signed  thechivery.com;
+the-citizenry.com               require_signed  the-citizenry.com;
 the-efa.org                     require_signed  "the-efa.org,the-efa.ccsend.com";
 thefisherman.com                require_signed  thefisherman.ccsend.com;
 thegovconadvisors.com           require_signed  reachmail.net;
-thehotviolinist.com             require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+thehotviolinist.com             require_signed  "ckmail4.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 thejurylab.com                  require_signed  icontactmail1.com;
 thelooploft.com                 require_signed  thelooploft.com;
 themagnetgroup.com              require_signed  themagnetgroup.com;
@@ -1899,13 +2059,17 @@
 thirdlove.com                   require_signed  thirdlove.com;
 # this file is maintained by carl@five-ten-sg.com - don't edit locally
 thomasnet.com                   require_signed  thomasnet.com;
+thomsonlinear.com               signed_white    fortive.onmicrosoft.com;        // some unsigned mail via salesforce
 thorntontomasetti.com           require_signed  thorntontomasetti.onmicrosoft.com;  // other spam signed by mailchimp
+thriftbooks-email.com           require_signed  thriftbooks-email.com;
 thrivemarket.com                require_signed  thrivemarket.com;
 ticketfly.com                   require_signed  ticketfly.com;
 ticketleap.com                  require_signed  "ticketleap.com,amazonses.com";
 tidio.net                       require_signed  tidio.net;
 tieivote.com                    require_signed  smtpserver.email;
+tiogahvac.com                   require_signed  tiogahvac.onmicrosoft.com;
 t.kohls.com                     require_signed  t.kohls.com;
+t.mail.coursera.org             require_signed  t.mail.coursera.org;
 tm.vistaprint.com               require_signed  tm.vistaprint.com;
 tomarind.com                    require_signed  "netorgft1471273.onmicrosoft.com,tomarind.ccsend.com";
 tomudall.com                    signed_white    bounce.bluestatedigital.com;
@@ -1920,7 +2084,7 @@
 # transactional mail and mailing lists
 trans.duluthtradingemail.com    require_signed  trans.duluthtradingemail.com;
 transferwise.com                require_signed  transferwise.com;
-traveloni.com                   require_signed  traveloni.ccsend.com;
+traveloni.com                   require_signed  "traveloni.com,traveloni.ccsend.com";
 travismanion.org                require_signed  omktmail2.com;
 trello.com                      require_signed  trello.com;
 trendhunter.com                 require_signed  trendhunter.ccsend.com;
@@ -1928,6 +2092,8 @@
 tridentadvisors.com             signed_white    tridentadvisors.onmicrosoft.com;// some mail has bad signature
 tridentmortgage.com             require_signed  tridentmortgage.com;
 trigentsolutions.com            require_signed  trigentsolutionsinc.onmicrosoft.com;
+tsdnotify.com                   require_signed  tsdnotify.com;                  // car leasing?
+t.spiritairlines.com            require_signed  t.spiritairlines.com;
 ttmail.timetrade.com            require_signed  timetrade.com;
 tuhs.temple.edu                 require_signed  tuhs.onmicrosoft.com;
 turnoutpac.org                  signed_white    bounce.bluestatedigital.com;
@@ -1949,6 +2115,7 @@
 unionbank.com                   require_signed  unionbank.com;
 unionhomemortgage.com           require_signed  eeoo.co;
 unionleague.org                 signed_white    "unionleague.org,unionleague.ccsend.com";   // some unsigned mail via ppe-hosted.com, wrong spf record, include: vs a:dispatch-us.ppe-hosted.com
+uniquephoto.com                 require_signed  uniquephoto.com;
 unitedyacht.com                 require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 unitronics.com                  require_signed  unitronics.ccsend.com;
 universalsocceracademy.com      require_signed  universalsocceracademy.ccsend.com;
@@ -1958,9 +2125,11 @@
 updates.conservativeintel.com   require_signed  updates.conservativeintel.com;
 updates.hayneedle.com           require_signed  updates.hayneedle.com;
 updates.ticketnetworkdirect.com require_signed  updates.ticketnetworkdirect.com;
+update.trulia.com               require_signed  update.trulia.com;
 uphs.upenn.edu                  signed_white    cvent-planner.com;              // some unsigned mail via en25
 uprinting.com                   require_signed  uprinting.com;
 ups.com                         require_signed  ups.com;
+upsemail.com                    require_signed  upsemail.com;                   // actually is ups
 upsilonventures.com             require_signed  upsilonllc.onmicrosoft.com;
 urthave.com                     require_signed  urthave.com;
 usa.constitutionalrightspac.com require_signed  usa.constitutionalrightspac.com;
@@ -1969,6 +2138,7 @@
 usnews-b2b.com                  require_signed  usnews-b2b.com;
 usnotaries.com                  require_signed  usnotaries.ccsend.com;
 us.panasonic.com                signed_white    "us.panasonic.com,pcus1.onmicrosoft.com";   // some broken signatures from microsoft
+usrigging.com                   require_signed  usrigging.onmicrosoft.com;
 usrisk.com                      require_signed  dmpemail1.com;
 us-takeoff.com                  require_signed  us-takeoff-com.20150623.gappssmtp.com;
 u.ticketliquidatorupdates.com   require_signed  u.ticketliquidatorupdates.com;
@@ -1987,6 +2157,7 @@
 verizonwireless.com             require_signed  verizonwireless.com;
 viewpoint.com                   require_signed  "viewpoint.com,coaxis.onmicrosoft.com,cvent-planner.com";
 vignetteslearning.com           require_signed  simplifiedelearning.ccsend.com;
+vip.conservativeintel.com       require_signed  vip.conservativeintel.com;
 virtualeventbags.com            require_signed  email.virtualeventbags.com;
 visitpartnerhub.com             require_signed  visitpartnerhub.com;
 visitwynn.com                   require_signed  visitwynn.com;
@@ -2003,6 +2174,7 @@
 wanjugo.com                     require_signed  wanjugo.com;
 warriorcustomgolf.com           require_signed  warriorcustomgolf.com;
 washingtonpost.com              require_signed  washingtonpost.com;
+washtimesnews.com               require_signed  washtimesnews.com;
 watchdog.net                    require_signed  sg.actionnetwork.org;
 watchmanmonitoring.com          require_signed  watchmanmonitoring.com;
 wayfair.com                     require_signed  "wayfair.com,wayfair.onmicrosoft.com";
@@ -2011,6 +2183,7 @@
 wearecollide.com                require_signed  "wearecollide-com.20150623.gappssmtp.com,mlsend3.com";
 weareultraviolet.org            require_signed  "weareultraviolet.org,list.weareultraviolet.org";
 weather.com                     require_signed  weather.com;
+webcargo.net                    require_signed  webcargo.net;
 webervations.com                require_signed  webervations.com;
 webinar.compliancekey.net       require_signed  webinar.compliancekey.net;
 webopenings.com                 require_signed  webopenings.com;
@@ -2030,6 +2203,7 @@
 whitegraphics.com               require_signed  whitegraphics-com.20150623.gappssmtp.com;
 wholesaleprime.com              require_signed  "sendgrid.net,frg.im";
 williampenninn.com              require_signed  williampenninn.ccsend.com;
+windstream.net                  require_signed  caaonline.ccsend.com;
 wineawesomeness.com             require_signed  wineawesomeness.com;
 winmo.com                       signed_white    "winmo.com,winmo-com.20150623.gappssmtp.com";   // missing winmo.com key in dns
 winzip.com                      require_signed  winzip.com;
@@ -2045,10 +2219,12 @@
 woof.barkshop.com               require_signed  woof.barkshop.com;
 woof.chewy.com                  require_signed  woof.chewy.com;
 woolrich.com                    require_signed  woolrich.com;
+worknetoccmed.com               require_signed  worknetoccmed.com;
 worldsciencefestival.com        require_signed  worldsciencefestival.com;
 wrigley.com                     require_signed  wrigley.com;
 wstelecomlaw.com                require_signed  sapronov.onmicrosoft.com;
 wtcphila.org                    require_signed  "wtcphila.onmicrosoft.com,wtcphila.ccsend.com";
+wullo.com                       require_signed  wullo.com;
 wyattresearchnewsletters.com    require_signed  wyattresearchnewsletters.com;
 x2vol.com                       require_signed  sendgrid.info;
 xarisma.com                     signed_white    xarisma.com;                    // some unsigned mail via netsuite.com