changeset 426:beda588f2881 stable-6-0-60

include sample dkim config
author Carl Byington <carl@five-ten-sg.com>
date Fri, 18 Aug 2017 09:39:31 -0700
parents 1b7a785610f5
children 9911e362b5dc
files dnsbl.dkim.conf xml/dnsbl.in
diffstat 2 files changed, 2083 insertions(+), 3 deletions(-) [+]
line wrap: on
line diff
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/dnsbl.dkim.conf	Fri Aug 18 09:39:31 2017 -0700
@@ -0,0 +1,2080 @@
+#
+#
+123g.info                       require_signed  123g.info;
+123greetings.biz                require_signed  123greetings.biz;
+123greetings.info               require_signed  123greetings.info;
+123rf.com                       require_signed  "123rf.com,123rf-com.20150623.gappssmtp.com";
+1and1.com                       require_signed  1and1.com;
+1stimpressioncom.com            require_signed  becausewearewomen.ccsend.com;
+247cpe.com                      require_signed  247cpe.com;
+24hrcares.com                   require_signed  24hrcares.onmicrosoft.com;
+24petwatch.com                  require_signed  24petwatch.com;
+2600hz.com                      require_signed  2600hz.com;
+314action.com                   signed_white    bounce.bluestatedigital.com;
+314action.org                   signed_white    bounce.bluestatedigital.com;
+4imprint.com                    require_signed  4imprint.com;
+4over.com                       require_signed  carrier.4over.com;
+7milesglobal.com                require_signed  7milesglobal-com.20150623.gappssmtp.com;
+a1.hilton.com                   require_signed  a1.hilton.com;
+a4m.org                         require_signed  sendgrid.info;
+aaabrasives.com                 require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+aaas.sciencepubs.org            require_signed  aaas.sciencepubs.org;
+aa.com                          require_signed  amrcorp.onmicrosoft.com;
+aadvantage.email.aa.com         require_signed  aadvantage.email.aa.com;
+aaepa.com                       require_signed  americanacademytraining.com;
+abbeypress.com                  require_signed  abbeypress.com;
+abcomrents.com                  require_signed  abcomrents.com;
+abingtonaesthetic.com           require_signed  "yahoo.com,em.secureserver.net";
+abt.com                         require_signed  abt-com.20150623.gappssmtp.com;
+academia-mail.com               require_signed  academia-mail.com;
+acclivitysoftware.com           require_signed  acclivitysoftware.com;
+account.kmart.com               require_signed  account.kmart.com;
+accountmanageremail.com         require_signed  accountmanageremail.com;
+account-nvidia.com              require_signed  account-nvidia.com;
+account.pinterest.com           require_signed  account.pinterest.com;
+account.sears.com               require_signed  account.sears.com;
+accounts.google.com             require_signed  "google.com,accounts.google.com";
+accounts.paperlesspost.com      require_signed  "paperlesspost.com,*.paperlesspost.com";
+accuspeechmobile.com            require_signed  netorg112606.onmicrosoft.com;
+accutechdata.com                require_signed  accutechdatasupplies.onmicrosoft.com;
+aclu.org                        require_signed  "aclu.org,email.aclu.org";
+aclupa.org                      require_signed  aclupa.org;
+acmeticketing.com               require_signed  acmeticketing.com;
+acronis.com                     require_signed  acronis.com;
+acs.org                         require_signed  "auth.ccsend.com,bluehornet.com";
+acsshows.com                    require_signed  acshomeshow.ccsend.com;
+actblue.com                     require_signed  actblue.com;
+actionlighting.com              require_signed  icontactmail4.com;
+actionnetwork.org               require_signed  sg.actionnetwork.org;
+activecollab.com                require_signed  activecollab.com;
+ac.travelocity.com              require_signed  ac.travelocity.com;
+actuarial-advancement.com       require_signed  actuarial-advancement-com.20150623.gappssmtp.com;
+acuityscheduling.com            require_signed  email.acuityscheduling.com;
+adaction.org                    require_signed  bounce.myngp.com;
+adcommgrp.com                   require_signed  adcommgrp-com.20150623.gappssmtp.com;
+adexchanger.com                 require_signed  adexchanger.com;
+adidasus-news.adidas.com        require_signed  adidasus-news.adidas.com;
+admarketing.yahoo.com           require_signed  admarketing.yahoo.com;
+adobe.com                       require_signed  adobe.com;
+adp.com                         require_signed  "adp.com,*.adp.com";
+adrianacurcio.com               require_signed  emlr2.com;
+adroptions.com                  require_signed  adroptions.ccsend.com;
+adr.org                         require_signed  adr.org;
+adt.com                         require_signed  adtcom.onmicrosoft.com;
+advancement.villanova.edu       require_signed  advancement.villanova.edu;
+adviserinvestments.com          require_signed  adviserinvestments.com;
+adv.strawberrynet.com           require_signed  adv.strawberrynet.com;
+afar.com                        require_signed  afar.com
+aflac-email.com                 require_signed  aflac-email.com;
+afsc.org                        require_signed  afsc.org;
+againstallgrain.com             require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+agencyprotalent.com             require_signed  agencyprotalent.com;
+agent.thehartford.com           require_signed  agent.thehartford.com;
+agfa.com                        require_signed  www-agfa.ccsend.com;
+agingcare.com                   require_signed  agingcare.com;
+agoodson.com                    require_signed  emlr2.com;
+agu.org                         require_signed  agu.org;
+aiaa.org                        require_signed  aiaa.org;
+airbnb.com                      require_signed  email.airbnb.com;
+airconway.com                   require_signed  airconway.ccsend.com;
+airstoc.com                     require_signed  airstoc.com;
+ajww.com                        require_signed  ajww-com.20150623.gappssmtp.com;
+akela-partners.com              require_signed  aweber.com
+alerts.aa.com                   require_signed  alerts.aa.com;
+alerts.aviatormastercard.com    require_signed  alerts.aviatormastercard.com;
+alerts.barclaycardus.com        require_signed  alerts.barclaycardus.com;
+alerts.comcast.net              signed_white    alerts.comcast.net;             // comcast forwarding breaks their own signatures
+alerts.offers.com               require_signed  "alerts.offers.com,email.offers.com";
+alertsp.chase.com               require_signed  alertsp.chase.com;
+alerts.santander.us             require_signed  alerts.santander.us;
+alerts.skype.com                require_signed  alerts.skype.com;
+alexandani.com                  require_signed  alexandani.com;
+alignable.com                   require_signed  "alignable.com,invites.alignable.com";
+allaboutjazz.com                require_signed  allaboutjazz.com;
+allianceforaction.com           signed_white    allianceforaction.ccsend.com    // some unsigned mail from their servers, no spf
+alliedmg.biz                    require_signed  alliedmg.biz;
+allinoneline.com                require_signed  allinoneline.ccsend.com;
+allstarbaseballacademy.com      require_signed  allstarbaseballacademy.ccsend.com;
+allstarnutrition.us             signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+allstate.com                    require_signed  allstate.com;
+alm.com                         require_signed  e.alm.com;
+almo.com                        require_signed  icontactmail1.com;
+alpineescrow.net                require_signed  alpineescrowarrowhead.onmicrosoft.com;
+alro.com                        require_signed  "alro.com,alrocorp.onmicrosoft.com";
+altigen.com                     require_signed  zcsend.net;
+altramotion.com                 require_signed  ptgnet4.onmicrosoft.com;
+alumniclass.com                 require_signed  alumniclass.com;
+alumniclubs.columbia.edu        require_signed  columbiabusiness.onmicrosoft.com;
+alumni.nd.edu                   require_signed  "nd.edu,imodules.com";
+alz.org                         require_signed  "alz-org.20150623.gappssmtp.com,mta-bbcspool.convio.net,auth.ccsend.com";
+amazoncapital.com               require_signed  amazon.com;
+amazon.ca                       require_signed  amazon.ca;
+amazon.com                      require_signed  amazon.com;
+amazon.fr                       require_signed  amazon.fr;
+amazonsellerservices.com        require_signed  amazonsellerservices.com;
+amcp.custombriefings.com        require_signed  custombriefings.com;
+americangreetings.com           require_signed  americangreetings.com;
+americansuspension.com          require_signed  store.smtp.bigcommerce.net;
+americaslibertypac.com          require_signed  bluehornet.com;
+amrevmuseum.org                 require_signed  "amrevmuseum.onmicrosoft.com,americanrevolutioncenter.ccsend.com,mta-bbcspool.convio.net";
+am.sony.com                     signed_white    sony.onmicrosoft.com;           // some unsigned mail via lightpath
+a.narrativemagazine.com         require_signed  a.narrativemagazine.com;
+anh-usa.org                     require_signed  salsalabs.org;
+anpanama.com                    require_signed  anpanama.com;
+anthempropane.com               require_signed  anthempropane.com;
+anthemww.com                    require_signed  matw.onmicrosoft.com
+apgrents.com                    require_signed  icontactmail6.com;
+aplaceformom.com                require_signed  aplaceformom.com;
+apple.com                       require_signed  apple.com;
+applemusic.com                  require_signed  applemusic.com;
+appliednet.com                  require_signed  "mktomail.com,mktroute.com";
+app.production.membersuite.com  require_signed  sendgrid.info;
+appulatemail.com                require_signed  appulatemail.com;
+aquafadas.com                   require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+archpaper.com                   require_signed  archpaper.ccsend.com;
+armsanctuary.org                require_signed  mta-bbcspool.convio.net;
+arthurhall.com                  require_signed  arthurhallins.onmicrosoft.com;
+artisanalcheese.com             require_signed  artisanalcheese.ccsend.com;
+artisticimagery.com             require_signed  artisticimagery-com.20150623.gappssmtp.com;
+artmaterialsonline.com          require_signed  artmaterialsonline.com;
+artnet.com                      signed_white    artnet.com;                     // some unsigned mail via their own servers
+artrenewal.org                  require_signed  artrenewal.ccsend.com;
+artsusa.org                     require_signed  bounce.bluestatedigital.com;
+asana.com                       require_signed  asana.com;
+ascot.co.uk                     require_signed  ascot.co.uk;
+asicentral.com                  require_signed  asicentral.com;
+asimplertime.com                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+asisignage.com                  require_signed  icontactmail4.com;
+askaspn.com                     require_signed  genius-network.com;
+associationvoice.com            require_signed  associationvoice.com;
+assuretyconsulting.com          signed_white    "assuretyconsulting.com,hubspot.com";   // some unsigned mail via salesforce, no spf record
+astc.org                        require_signed  icontactmail3.com;
+astm.org                        signed_white    astm.org;                       // some unsigned mail from their own servers
+atautosbdc.com                  require_signed  sg01.motosnap.com;
+atdcd-media.com                 require_signed  atdcd-media.com;
+athero.org                      require_signed  "*.musvc.com";
+att.tm00.com                    require_signed  tm00.com;
+audicommunication.com           require_signed  audicommunication.com;
+audiencerewards.com             require_signed  audiencerewards.com;
+autodeskcommunications.com      require_signed  autodeskcommunications.com;
+autonomous.ai                   require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+avalonflooring.com              signed_white    "nf157.n-email.net,nf156.n-email.net";  // some unsigned mail from their own servers
+avangate.com                    require_signed  avangate.com;
+avanteducation.com              require_signed  avanteducation.com;
+avvo.com                        signed_white    avvocom.onmicrosoft.com;        // some unsigned mail via salesforce
+azureemail.microsoft.com        require_signed  azureemail.microsoft.com;
+backupify.com                   require_signed  backupify.com;
+bacnyc.org                      require_signed  bacnyc.ccsend.com;
+bankofamerica.com               require_signed  bankofamerica.com;
+bankofinternet.com              require_signed  bankofinternet.com;
+barackobama.com                 require_signed  barackobama.com
+bartlettbearing.com             require_signed  "bartlettbearing.onmicrosoft.com,auth.ccsend.com";
+basusa.com                      signed_white    myenrollservices.onmicrosoft.com;   // some unsigned mail from their own servers with no spf record
+bbdo.com                        require_signed  bbdo.com;
+bbofpa.com                      require_signed  bbofpa.ccsend.com;
+bccsoftware.com                 signed_white    "bccsoftware.onmicrosoft.com,email.clickdimensions.com";    // some unsigned from their own servers
+bcgarticles.com                 require_signed  bcgarticles.com;
+bcgjobalerts.com                require_signed  bcgjobalerts.com;
+bchgrp.com                      require_signed  bluechiphospitalitygroup.ccsend.com;
+b.colehaan.com                  require_signed  colehaan.com;
+bcorporation.net                require_signed  bcorporation.net;
+beardguitars.com                require_signed  zcsend.net;
+beauty.elfcosmetics.com         require_signed  beauty.elfcosmetics.com;
+beauty.sephora.com              require_signed  beauty.sephora.com;
+bedbathandbeyond.com            signed_white    bedbathandbeyond.com;           // unsigned mail via ibm.com, fails spf2/pra record
+behance.com                     require_signed  behance.com;
+belkemail.com                   require_signed  belkemail.com;
+belly-mail.com                  require_signed  main.belly-mail.com;
+benrlujan.com                   require_signed  bounce.myngp.com;
+betabrand.com                   require_signed  email.betabrand.com;
+bethany2016.com                 require_signed  bounce.myngp.com;
+bgeneral.com                    signed_white    bgeneral.com;                   // some unsigned mail via bgeneral.com
+bhfs.com                        signed_white    "bhfs.com,brownsteinhyattfarberschreck.onmicrosoft.com";    // temp errors, 0 bit key
+biblicalarchaeology.org         require_signed  biblicalarchaeology.wc08.net;
+billdove.com                    require_signed  billdove.com;                   // never signed, but must pass spf
+billerportal.com                require_signed  billerportal.com;
+billfoster.com                  require_signed  bounce.myngp.com;
+billing01.email-allstate.com    require_signed  billing01.email-allstate.com;
+billpay.bankofamerica.com       require_signed  billpay.bankofamerica.com;
+bingads.com                     require_signed  bingads.com;
+bio.org                         require_signed  bio.org;
+birdiebug.com                   require_signed  birdiebug.com;
+birthdayalarm.com               require_signed  birthdayalarm.com;
+bistroromano.com                require_signed  bistroromano.ccsend.com;
+bitsandpieces-alerts.com        require_signed  bitsandpieces-alerts.com;
+bizbash.com                     require_signed  "bizbash.com,wixshoutout.com";
+bizbuysell.com                  require_signed  bizbuysell.com;
+bizdevworkshops.com             require_signed  cvent-planner.com;
+blueapron.com                   require_signed  blueapron.com;
+bluedge.com                     require_signed  "bluedge.com,nri605.onmicrosoft.com";
+blueshoreproperties.com         require_signed  icontactmail2.com;
+bluesoftware.com                require_signed  bluesoftware.com;
+bluesombrero.com                require_signed  send.bluesombrero.com;
+bma1.com                        require_signed  bma1-com.20150623.gappssmtp.com;
+bmj.com                         require_signed  bmj.com;
+bmwfs.com                       require_signed  bmwfs.com;
+bnbestimating.com               require_signed  bnbestimating-com.20150623.gappssmtp.com;
+boatus.com                      require_signed  boatus.wc08.net;
+bobcasey.com                    signed_white    bounce.bluestatedigital.com;
+boldexperts.net                 require_signed  boldexperts-net.20150623.gappssmtp.com;
+bolideco.com                    require_signed  "bolideco-com.20150623.gappssmtp.com,bolide.ccsend.com";
+boltonpac.com                   require_signed  boltonpac.com;
+bookbub.com                     require_signed  bookbub.com;
+bookbyte.com                    require_signed  bookbyte.com;
+booking.com                     require_signed  "booking.com,sg.booking.com";
+box.com                         require_signed  box.com;
+boxed.com                       require_signed  boxed.com;
+boydsphila.com                  require_signed  boydsphila.ccsend.com;
+boylehotels.com                 require_signed  boylehotels.onmicrosoft.com;
+braceshop.com                   require_signed  braceshop.com;
+brandshare.us                   require_signed  brandshare.onmicrosoft.com
+brandywine.org                  signed_white    brandywineconservancyandmuseumofart.ccsend.com;     // some unsigned mail directly from their server on fios.verizon
+bridgemailsystem.com            require_signed  bridgemailsystem.com;
+britemg.com                     require_signed  advertickets.onmicrosoft.com;
+broadcaster3.medpagetoday.com   require_signed  broadcaster3.medpagetoday.com;
+brrice.edu                      require_signed  brrice.edu;
+brucebrown.com                  require_signed  emlr2.com;
+brumark.com                     signed_white    exploring.ccsend.com;           // unsigned mail from exploring.com, no spf record
+b.strapworks.com                require_signed  triggermail.io;
+bthechange.com                  require_signed  "bthechange-com.20150623.gappssmtp.com,mequoda-btc.wc08.net";
+b.tigerdirect.com               require_signed  tigerdirect.com;
+buckscountyherald.com           require_signed  aweber.com;
+buckscounty.org                 require_signed  countyofbucks.onmicrosoft.com;
+budgetrentacartolls.com         require_signed  smtp.com;
+buildingconnected.com           require_signed  buildingconnected.com;
+burpeenews.com                  require_signed  burpeenews.com;
+business.amazon.com             require_signed  business.amazon.com;
+businessinsider.com             require_signed  businessinsider.com;
+cadsourcing.com                 require_signed  cadsourcing-com.20150623.gappssmtp.com;
+cafarogreenleaf.com             require_signed  cafarogreenleaf.ccsend.com;
+cafepress.com                   require_signed  cafepressinc.onmicrosoft.com;
+calparks.org                    require_signed  mta-bbcspool.convio.net;
+calvaryabq.org                  require_signed  calvaryabq.org;
+camasb.org                      signed_white    camasb.org;                     // some unsigned mail via coxmail that fails spf
+camprrm.com                     require_signed  camprrm.ccsend.com;
+canstockphoto.com               require_signed  canstockphoto.com;
+cantaybailaconmigo.com          require_signed  musictogether.ccsend.com;
+capbluecross.com                require_signed  cvent-planner.com;
+capemaymac.org                  require_signed  capemaymac.ccsend.com;
+capitaloneemail.com             require_signed  capitaloneemail.com;
+care.comcast.com                require_signed  care.comcast.com;
+careersinfosecurity.com         require_signed  careersinfosecurity.com;
+caregiveraction.org             require_signed  caregiveraction.org;
+care.gotomypc.com               require_signed  care.gotomypc.com;
+carlisleevents.com              require_signed  carlisleevents.com;
+carnivalcruiselineemail.com     require_signed  carnivalcruiselineemail.com;
+caskers.com                     require_signed  caskers.com;
+catapultmarketing.com           require_signed  epsilon.onmicrosoft.com;
+cbginc.com                      require_signed  cbginc-com.20150623.gappssmtp.com;
+cbldf.org                       signed_white    "nationsend6.com,nationsend14.com,nationsend17.com";
+cbp.dhs.gov                     require_signed  cbpgov.onmicrosoft.com;
+cbre.com                        require_signed  mailsvr.com;
+cbs.com                         require_signed  cbs.onmicrosoft.com;
+cbsd.org                        signed_white    cbsd.onmicrosoft.com;           // some unsigned mail via notification.com fails spf with -all
+cbslocal.com                    require_signed  cbslocal.com;
+cbsnewsletter.com               require_signed  cbsnewsletter.com;
+cbsradio.com                    require_signed  cbs.onmicrosoft.com;
+cc.att-mail.com                 require_signed  cc.att-mail.com;
+cc.binders.com                  require_signed  binders.com;
+ccphilly.org                    require_signed  smtpcorp.com;
+cc.yahoo-inc.com                require_signed  cc.yahoo-inc.com;           // yahoo signin notifications
+cdwemail.com                    require_signed  cdwemail.com;
+ceainfo.org                     require_signed  ceainfo.org;
+ce.homeadvisor.com              require_signed  ce.homeadvisor.com;
+centurylink-business.com        require_signed  centurylink-business.com;
+ce.org                          require_signed  ce.org;
+cerner.com                      require_signed  cerner.com;                 // client of mediasupply
+cfostudio.com                   require_signed  cvent-planner.com;
+chambermusicinstitute.com       require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+change.org                      signed_white    change.org;                 // some unsigned mail via exacttarget
+charlesmichaelphotography.com   require_signed  emlr2.com;
+checkin.email.aa.com            require_signed  checkin.email.aa.com;
+chownow.com                     require_signed  chownow.com;
+chriscoons.com                  signed_white    bounce.bluestatedigital.com;
+chrismurphy.com                 require_signed  chrismurphy.com;
+christianacare.org              signed_white    "cchs.onmicrosoft.com,mktomail.com";
+christianbook.com               require_signed  christianbook.com;
+cintas.com                      require_signed  cintas.com;
+citibank.com                    require_signed  citibank.com;
+citrixonline.com                require_signed  citrixonline.com;
+citybizlist.com                 require_signed  bsf01.com;
+cityfloorsupply.com             require_signed  omktmail2.com;
+cityofchicago.org               require_signed  cityofchicago.ccsend.com;
+citytheatrical.com              require_signed  citytheatrical.ccsend.com;
+citywideloan.net                require_signed  citywideloan.net;
+civiliandefensesystems.com      require_signed  civiliandefensesystems-com.20150623.gappssmtp.com
+ciweb.org                       require_signed  chautauquainstitution.onmicrosoft.com;
+classicspecs.com                require_signed  classicspecs.com;
+clddigital.com                  require_signed  cldgraphics.onmicrosoft.com;
+cleanrouter.com                 require_signed  "*.cleanrouter.com";
+click.dandb.com                 require_signed  click.dandb.com;
+climber.com                     require_signed  climber.com;
+clothingline.com                require_signed  clothingline.ccsend.com;
+cloud.carbonite.com             require_signed  cloud.carbonite.com;
+clover.com                      require_signed  clover.com;
+cmclibrary.org                  require_signed  capemaycountylibrary.onmicrosoft.com;
+cm.directv.com                  require_signed  cm.directv.com;
+cmdnet.org                      require_signed  cmdnet.org;
+cm.zazzle.com                   require_signed  cm.zazzle.com
+cnczone.com                     require_signed  cnczone.com;
+colocation.com                  require_signed  colocation-com.20150623.gappssmtp.com;
+colonialevents.fan-one.com      require_signed  colonialevents.fan-one.com;
+coloradoproduce.org             require_signed  coloradoproduce.ccsend.com;
+colorfilevcs.com                require_signed  colorfilevcs.com;
+colorofchange.org               require_signed  colorofchange.org;
+color-reflections.com           require_signed  colorreflections.onmicrosoft.com;
+com2.smartbidnet.com            require_signed  smartbidnet.com;
+comm2.wellsfargoemail.com       require_signed  comm2.wellsfargoemail.com;
+communication.ibx2.com          require_signed  communication.ibx2.com;
+communication.ruelala.com       require_signed  communication.ruelala.com;
+communications.meredith.com     require_signed  communications.meredith.com;
+compressionsale.com             signed_white    icontactmail2.com;              // some unsigned mail via their own servers
+concur.com                      require_signed  sap.onmicrosoft.com;
+conferencegroup.com             signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+connectedcommunity.org          require_signed  connectedcommunity.org;
+connect.match.com               require_signed  connect.match.com;
+connect.thewalkingcompany.com   require_signed  connect.thewalkingcompany.com;
+connect.wellsfargoemail.com     require_signed  connect.wellsfargoemail.com;
+conservativesource.com          require_signed  conservativesource.com;
+conshohockenporsche.com         require_signed  "*.shared.hubspot.com,*.hubspotemail.net";
+consigli.com                    require_signed  "consigli.com,consiglico.onmicrosoft.com";
+contact-client.com              require_signed  contact-client.com;
+contractimprint.com             require_signed  criticalimpactinc.com;
+cookwoods.com                   require_signed  cookwoods.ccsend.com;
+cooperhealth.org                require_signed  cooperhealth.org;
+corcexpo.com                    require_signed  "corcexpo-com.20150623.gappssmtp.com,corcexpo.ccsend.com";
+cornell.edu                     signed_white    hubspot.com;                    // Cornell Lab of Ornithology via hubspot
+co.rockland.ny.us               require_signed  countyofrockland.onmicrosoft.com;
+corp.lawyer.com                 require_signed  "lawyer.com,referrals.lawyer.com";
+corporate-interiors.com         require_signed  corporate-interiors.ccsend.com;
+covertside.net                  require_signed  icontactmail6.com;
+cpcstrategy.com                 require_signed  cpcstrategy-com.20150623.gappssmtp.com;
+cpgmatters.com                  require_signed  cpgmatters.ccsend.com;
+cpiinternational.com            require_signed  "vtiger.email,emcan1.vtigermail.com";
+craftunique.com                 require_signed  craftunique-com.20150623.gappssmtp.com;
+craigslist.org                  require_signed  craigslist.org;
+crainalerts.com                 require_signed  crainalerts.com;
+crashplan.com                   require_signed  crashplan.com;
+crcind.com                      require_signed  crcglobal.onmicrosoft.com;
+create.paper-source.com         require_signed  create.paper-source.com;
+creativegroup.com               require_signed  "roberthalf.onmicrosoft.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+creativemag.com                 signed_white    creativemagazine.ccsend.com;    // some unsigned mail via gmail
+creditkarma.com                 require_signed  creditkarma.com;
+credit.paypal.com               require_signed  credit.paypal.com;
+credoaction.com                 require_signed  "credoaction.com,controlshiftlabs.com";
+crexi.com                       require_signed  crexi.com;
+crlnews.com                     require_signed  "omktmail2.com,icontactmail1.com,icontactmail9.com";
+csa.canon.com                   require_signed  "mktomail.com,mktdns.com,mktosender.com";
+c-sgroup.com                    require_signed  c-sgroup.com;
+csifoodpro.com                  require_signed  csifoodpro.ccsend.com;
+csmail.peoplefinders.com        require_signed  csmail.peoplefinders.com;
+csuchico.edu                    require_signed  csuchico.edu;
+csusb.edu                       require_signed  "csusb.edu,auth.ccsend.com";
+culvercitychamber.com           require_signed  culvercitychamber.ccsend.com;
+culvercity.org                  require_signed  culvercity.onmicrosoft.com;
+curbed.com                      require_signed  "curbed.com,curbednetwork.com";
+currentcatalog.com              signed_white    currentcatalog.com;             // unsigned from interactive.biz failing spf
+custcommunications.sage.com     require_signed  sage.com;
+customer.box.com                require_signed  customer.box.com;
+customer.usps.com               require_signed  customer.usps.com;
+cutleryandmore.com              require_signed  cutleryandmore.com;
+cwf.org                         require_signed  cwfoundation.onmicrosoft.com;
+d2em.microsoft.com              require_signed  d2em.microsoft.com;
+dackconsulting.com              require_signed  "dackconsulting.onmicrosoft.com,vrmailer3.com";
+dailydeals.snoothmail.com       require_signed  mg.snoothmail.com;
+dailykos.com                    require_signed  sg.actionnetwork.org;
+dailyleak.club                  require_signed  dailyleak.club;
+dandh.com                       signed_white    email.clickdimensions.com;      // unsigned mail from their own servers with no spf
+darkironfitness.com             signed_white    aweber.com;                     // some broken signatures from aweber that fail spf
+dasd.org                        require_signed  "bbnotify.net,infosnap.com";
+databreachtoday.com             require_signed  databreachtoday.com;
+davidfrancisfurniture.com       require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+davidsuzuki.org                 require_signed  davidsuzuki.org;
+davios.com                      require_signed  www-davios.ccsend.com;
+dayspring.com                   require_signed  dayspring.com;
+daytimer.com                    require_signed  daytimer.com;
+dcmkt.com                       require_signed  dcmkt.com;
+dd.delta.org                    require_signed  dd.delta.org;
+dealer.onstation.com            require_signed  dealer.onstation.com;
+deals.priceline.com             require_signed  deals.priceline.com;
+defenseleadershipforum.org      require_signed  icontactmail2.com;
+delawaretheatre.org             signed_white    delawaretheatre.ccsend.com;     // some unsigned mail via gmail
+dell.com                        signed_white    "dell.com,sendgrid.me";         // some unsigned mail via rackspace that fails spf
+deluxe.com                      signed_white    deluxe.onmicrosoft.com;         // spf says also from mktomail and qualtrics
+demandforced3.com               require_signed  demandforced3.com;
+demandprogress.org              require_signed  demandprogress.org;
+democrats.org                   require_signed  democrats.org;
+depaceminterris.org             signed_white    icontactmail4.com;              // some unsigned mail arriving from comcast servers
+dep.nj.gov                      require_signed  sonj.onmicrosoft.com;
+designandconstructionweek.com   require_signed  designandconstructionweek.com;
+designerpages.com               require_signed  designerpages.com;
+detroitjazzfest.org             require_signed  detroitjazzfest.ccsend.com;
+dhl.com                         require_signed  dhl.com;
+diabetes.org                    require_signed  mta-bbcspool.convio.net;
+dialpad.com                     require_signed  dialpad.com;
+diamondmm.com                   require_signed  icontactmail3.com;
+dieselpowergear.com             require_signed  "cmail19.com,cmail20.com";
+digdev.com                      require_signed  digdevdirect.onmicrosoft.com;
+digest.producthunt.com          require_signed  digest.producthunt.com;
+dimensiondesign.com             require_signed  "mx-senderer-02.com,mx-senderer-03.com";
+directbuy.com                   require_signed  directbuy.com;
+direct.mercurynews.com          require_signed  direct.mercurynews.com;
+directoryofillustration.com     require_signed  directoryofillustration.com;
+discogs.com                     require_signed  discogs.com;
+discoverphl.com                 require_signed  discoverphl.com;
+discover.zinio.com              require_signed  discover.zinio.com;
+dishemail.com                   require_signed  dishemail.com;
+divenewsletter.com              require_signed  divenewsletter.com;
+diversityagenda.com             require_signed  theconferencecenter.ccsend.com;
+djmarks.com                     require_signed  djmarks.ccsend.com;
+dlsdiscovery.net                require_signed  dlsdiscovery.net;
+dmgiant.del2.com                require_signed  del2.com;
+dnc.com                         require_signed  dnc.com;
+dnc.org                         require_signed  dnc.org;
+doa.nc.gov                      require_signed  doa.nc.gov;
+doelegal.com                    require_signed  doelegal.com;
+dogseminarsdirectory.com        require_signed  doggiemanners.ccsend.com;
+dola.com                        require_signed  "dola.com,dola-com.20150623.gappssmtp.com";
+dolenutritionnews.com           require_signed  dolenutritionnews.com;
+dolphinproject.com              require_signed  sg.actionnetwork.org;
+donaldjtrump.com                require_signed  donaldjtrump.com;
+donaldson.com                   require_signed  donaldson.onmicrosoft.com;
+dor.state.ma.us                 signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+dpreview.com                    require_signed  dpreview.com;
+dreamstime.com                  require_signed  dreamstime.com;
+drexel.edu                      require_signed  "drexel0.onmicrosoft.com,imodules.com";
+dropbox.com                     require_signed  dropbox.com;
+dropboxmail.com                 require_signed  dropboxmail.com;
+drpa.org                        require_signed  "drpapatco.onmicrosoft.com,drpapatco.ccsend.com";
+drsfostersmith.com              require_signed  drsfostersmith.com;
+dscc.org                        require_signed  dscc.org;
+dslgroup.com                    require_signed  dslgroup.ccsend.com;            // needs spf for some unsigned mail from their own servers
+ducotech.com                    signed_white    ducotech.ccsend.com;            // some unsigned mail from their own servers
+dullesmetro.com                 require_signed  dullesmetro.ccsend.com;
+duluthtradingemail.com          require_signed  duluthtradingemail.com;
+dunnemanning.com                require_signed  dunnemanning-com.20150623.gappssmtp.com;
+dvd.com                         require_signed  dvd.com;
+dvfbc.com                       require_signed  dvfbc.ccsend.com;
+dwquailgolf.com                 require_signed  icontactmail1.com;
+e1.emeraldexpoinfo.com          require_signed  e1.emeraldexpoinfo.com;
+e1.llbean.com                   require_signed  e1.llbean.com;
+e2.shutterfly.com               require_signed  e2.shutterfly.com;
+e8.aigdigital.com               require_signed  e8.aigdigital.com;
+e.airgas.com                    require_signed  e.airgas.com;
+ealerts.bankofamerica.com       require_signed  ealerts.bankofamerica.com;
+e.allrecipes.com                require_signed  e.allrecipes.com;
+e.appleseeds.com                require_signed  e.appleseeds.com;
+eastwood.com                    require_signed  eastwood.com;
+easy.staples.com                require_signed  easy.staples.com;
+eat24.com                       require_signed  eat24.com;
+e.att-mail.com                  require_signed  e.att-mail.com;
+e.avis.com                      require_signed  e.avis.com;
+ebay.com                        require_signed  ebay.com;
+e.berries.com                   require_signed  e.berries.com;
+e.bevmo.com                     require_signed  e.bevmo.com;
+e.bloomingdales.com             require_signed  e.bloomingdales.com;
+e.blueapron.com                 require_signed  e.blueapron.com;
+e.borrowlenses.com              require_signed  e.borrowlenses.com;
+e.budget.com                    require_signed  e.budget.com;
+e.build.com                     require_signed  e.build.com;
+e.business.officedepot.com      require_signed  e.business.officedepot.com;
+e.campingworld.com              require_signed  e.campingworld.com;
+echosign.com                    require_signed  echosign.com;
+e.clarksusa.com                 require_signed  e.clarksusa.com;
+eclinicalmail.com               require_signed  eclinicalmail.com;
+eclipsegr.com                   require_signed  eclipsegr-com.20150623.gappssmtp.com;
+e.colehaan.com                  require_signed  e.colehaan.com;
+e.columbia.com                  require_signed  e.columbia.com;
+e.comixology.com                require_signed  e.comixology.com;
+ecommail.walgreens.com          require_signed  ecommail.walgreens.com;
+economist.com                   require_signed  economist.com;
+e.constantcontact.com           require_signed  e.constantcontact.com;
+e.copart.com                    require_signed  e.copart.com;
+ecrmemail.verizonwireless.com   require_signed  verizonwireless.com;
+e.customink.com                 require_signed  e.customink.com;
+edelivery.citi.com              require_signed  edelivery.citi.com;
+e.delta.com                     require_signed  e.delta.com;
+e.deluxe.com                    require_signed  e.deluxe.com;
+edgewaternetworks.com           require_signed  edgewaternetworks.com;
+ed.gov                          require_signed  "ed.gov,*.ed.gov";
+e.digikey.com                   require_signed  e.digikey.com;
+e.discover.com                  require_signed  e.discover.com
+e.disneyinteractive.com         require_signed  e.disneyinteractive.com;
+e.doverpublishing.com           require_signed  e.doverpublishing.com;
+e.drugstore.com                 require_signed  e.drugstore.com;
+edu.cpaacademy.org              require_signed  edu.cpaacademy.org;
+e.economist.com                 require_signed  e.economist.com;
+e.eharmony.com                  require_signed  e.eharmony.com;
+e.empiretodaynews.com           require_signed  e.empiretodaynews.com;
+e.esteelauder.com               require_signed  e.esteelauder.com;
+e.etsy.com                      require_signed  e.etsy.com;
+e.everydayhealth.com            require_signed  e.everydayhealth.com;
+e.expertmarket.com              require_signed  e.expertmarket.com;
+e.fanaticsretailgroup.com       require_signed  e.fanaticsretailgroup.com;
+e.feld-inc.com                  require_signed  e.feld-inc.com;
+effem.com                       require_signed  effem.com;
+efi.com                         require_signed  efi.com;
+e.fitbit.com                    require_signed  e.fitbit.com;
+efolder.net                     require_signed  mktroute.com;
+e.gamestop.com                  require_signed  e.gamestop.com;
+e.geappliances.com              require_signed  e.geappliances.com;
+e.gogoair.com                   require_signed  e.gogoair.com;
+e.gourmetgiftbaskets.com        require_signed  e.gourmetgiftbaskets.com;
+e.governmenthealthinsurance.com require_signed  e.governmenthealthinsurance.com;
+e.grainger.com                  require_signed  e.grainger.com;
+egress.com                      require_signed  egress.com;
+e.grubhub.com                   require_signed  e.grubhub.com;
+e.hotwire.com                   require_signed  e.hotwire.com;
+e.hyatt.com                     require_signed  e.hyatt.com;
+eightcoupons.com                require_signed  eightcoupons.com;
+e.intuit.com                    require_signed  e.intuit.com;
+e.jcpenney.com                  require_signed  e.jcpenney.com;
+e.joann.com                     require_signed  e.joann.com;
+e.landsend.com                  require_signed  e.landsend.com;
+e.lbaop.org                     require_signed  e.lbaop.org;
+eleadtrack.net                  require_signed  eleadtrack.net;
+e.leafly.com                    require_signed  e.leafly.com;
+electricfactory.info            require_signed  electricfactory.ccsend.com;
+elfcosmetics.com                require_signed  elfcosmetics.com;
+eliteislandresorts.com          require_signed  zmaildirect.com;
+e.livestream.com                require_signed  e.livestream.com;
+elizabethwarren.com             signed_white    bounce.bluestatedigital.com;
+elmlogistics.com                require_signed  elmlogistics.ccsend.com;
+e.lordandtaylor.com             require_signed  e.lordandtaylor.com;
+e.lowes.com                     require_signed  e.lowes.com;
+elsevier.com                    require_signed  elsevier.com;
+elsoln1.com                     require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+e.lumberliquidators.com         require_signed  e.lumberliquidators.com;
+em.1800flowers.com              require_signed  em.1800flowers.com;
+em.adweek.com                   require_signed  em.adweek.com;
+email1.avery.com                require_signed  email1.avery.com;
+email1.garmin.com               require_signed  email1.garmin.com;
+email1.geico.com                require_signed  email1.geico.com;
+email1.omronhealthcare.com      require_signed  email1.omronhealthcare.com;
+email2.directnic.com            require_signed  directnic.com;
+email2.office.com               require_signed  email2.office.com;
+email2.riteaid.com              require_signed  email2.riteaid.com;
+email3-beyond.com               require_signed  email3-beyond.com;
+email3.directnic.com            require_signed  directnic.com;
+email4.directnic.com            require_signed  directnic.com;
+email-aaa.com                   require_signed  email-aaa.com;
+email.aa.com                    require_signed  email.aa.com;
+email.aarp.org                  require_signed  email.aarp.org;
+email.aegeanair.com             require_signed  email.aegeanair.com;
+email.allrecipes.com            require_signed  email.allrecipes.com;
+email.amc.com                   require_signed  email.amc.com;
+email.americanexpress.com       require_signed  email.americanexpress.com;
+email.americangreetings.com     require_signed  email.americangreetings.com;
+e-mail.amtrak.com               require_signed  e-mail.amtrak.com;
+email.apple.com                 require_signed  email.apple.com;
+email.athleta.com               require_signed  email.athleta.com;
+email.b0.monster.com            require_signed  email.b0.monster.com;
+email.babycenter.com            require_signed  email.babycenter.com;
+email.bananarepublicfactory.com require_signed  email.bananarepublicfactory.com;
+email.bandh.com                 require_signed  email.bandh.com;
+email.bbc.com                   require_signed  email.bbc.com;
+emailbedbathandbeyond.com       require_signed  emailbedbathandbeyond.com;
+email.bjs.com                   require_signed  email.bjs.com;
+email.box.com                   require_signed  "email.box.com,mktdns.com";
+email.caesars-marketing.com     require_signed  email.caesars-marketing.com;
+email.calphalon.com             require_signed  email.calphalon.com;
+email.cbssports.com             require_signed  email.cbssports.com;
+email.chase.com                 require_signed  email.chase.com;
+email.cheaptickets.com          require_signed  email.cheaptickets.com;
+emailchristmastreeshops.com     require_signed  emailchristmastreeshops.com;
+email.coldwatercreek.com        require_signed  coldwatercreek.com;
+emailcoldwatercreek.com         require_signed  emailcoldwatercreek.com;
+email.comcastsportsnet.com      require_signed  email.comcastsportsnet.com;
+email.consumerreports.org       require_signed  email.consumerreports.org;
+email.content.monster.com       require_signed  email.content.monster.com;
+email.coolibar.net              require_signed  email.coolibar.net;
+email.cooperjones.com           require_signed  email.cooperjones.com;
+email.cort.com                  require_signed  email.cort.com;
+email.cruisecritic.com          require_signed  email.cruisecritic.com;
+email.cynopsis.com              signed_white    email.cynopsis.com;             // some unsigned from their own servers that fails spf
+email.digg.com                  require_signed  email.digg.com;
+email.directnic.com             require_signed  directnic.com;
+email.disneycruiseline.com      require_signed  email.disneycruiseline.com;
+email.diynetwork.com            require_signed  email.diynetwork.com;
+emaildl.att-mail.com            require_signed  emaildl.att-mail.com;
+email.dowjones.com              require_signed  email.dowjones.com;
+email.ed2go.com                 require_signed  email.ed2go.com;
+email.eileenfisher.com          require_signed  email.eileenfisher.com;
+email.emeraldclub.com           require_signed  email.emeraldclub.com;
+email.engineering360.com        require_signed  email.engineering360.com;
+email.enterprise.com            require_signed  email.enterprise.com;
+email.eventmarketerinfo.com     require_signed  email.eventmarketerinfo.com;
+email.eviteideas.com            require_signed  email.eviteideas.com;
+e-mail.fabletics.com            require_signed  e-mail.fabletics.com;
+email.familyvacationcritic.com  require_signed  email.familyvacationcritic.com;
+email.famousfootwear.com        require_signed  email.famousfootwear.com;
+email.fathead.com               require_signed  email.fathead.com;
+emailff.att-mail.com            require_signed  emailff.att-mail.com;
+email.foliomag.com              require_signed  email.foliomag.com;
+email.foodandwine.com           require_signed  email.foodandwine.com;
+email.food.com                  require_signed  email.food.com;
+email.foodnetwork.com           require_signed  email.foodnetwork.com;
+email.gaiam.com                 require_signed  "email.gaiam.com,pmta.sailthru.com";
+email-galls.com                 require_signed  email-galls.com;
+email.gap.com                   require_signed  email.gap.com;
+email.gapfactory.com            require_signed  email.gapfactory.com;
+email.giantfoodstores.com       require_signed  email.giantfoodstores.com;
+email.golfgalaxy.com            require_signed  email.golfgalaxy.com;
+email.goodshop.com              require_signed  email.goodshop.com;
+email.greatamericancountry.com  require_signed  email.greatamericancountry.com;
+email.gundogsupply.com          require_signed  email.gundogsupply.com;
+e-mail.hallmark.com             require_signed  e-mail.hallmark.com;
+email.healthecareers.com        require_signed  email.healthecareers.com;
+email.hgtv.com                  require_signed  email.hgtv.com;
+email.highmarkhealth.com        require_signed  email.highmarkhealth.com;
+email.homedepot.com             require_signed  email.homedepot.com;
+email-honeywell.com             require_signed  email-honeywell.com;
+email.hpconnected.com           require_signed  email.hpconnected.com;
+email.hsn.com                   require_signed  email.hsn.com;
+email.iamsinc.com               require_signed  iamsinc.com;
+emailinfo.bestbuy.com           require_signed  emailinfo.bestbuy.com;
+email.jackfrostnational.com     require_signed  email.jackfrostnational.com;
+email.jacquielawson.com         require_signed  email.jacquielawson.com;
+email.jcrew.com                 require_signed  email.jcrew.com;
+email.jetblue.com               require_signed  email.jetblue.com;
+email.justflyemail.com          require_signed  email.justflyemail.com;
+email.lakeshorelearning.com     require_signed  email.lakeshorelearning.com;
+email.landroverusa.com          require_signed  email.landroverusa.com;
+email.landsend.com              require_signed  email.landsend.com;
+email.lexisnexis.com            require_signed  email.lexisnexis.com;
+email-libertymutual.com         require_signed  email-libertymutual.com;
+email.livenation.com            require_signed  email.livenation.com;
+email.livestrong.com            require_signed  livestrong.com;
+email.microsoftonline.com       require_signed  email.microsoftonline.com;
+email-modells.com               require_signed  "bounceexchange.com,email-modells.com";
+email.mrporter.com              require_signed  email.mrporter.com;
+email-mrsfields.com             require_signed  email-mrsfields.com;
+email.nationstarmail.com        require_signed  email.nationstarmail.com;
+email-nationwide.com            require_signed  email-nationwide.com;
+email.naturehills.com           require_signed  "email.naturehills.com,klaviyomail.com";
+email.naviance.com              require_signed  email.naviance.com;
+email.newpig.com                require_signed  email.newpig.com;
+email.nick.com                  require_signed  email.nick.com;
+email-nmss.org                  require_signed  email-nmss.org;
+email.norton.com                require_signed  email.norton.com;
+emailoffer.griotsgarage.com     require_signed  emailoffer.griotsgarage.com;
+email.office.com                require_signed  email.office.com;
+email.oldnavy.com               require_signed  email.oldnavy.com;
+email.oliverwymangroup.com      require_signed  email.oliverwymangroup.com;
+email.oneida.com                require_signed  email.oneida.com;
+email.onpeak.com                require_signed  email.onpeak.com;
+email.opentable.com             require_signed  email.opentable.com;
+email.oriental-trading.com      require_signed  email.oriental-trading.com;
+email.overstock.com             require_signed  email.overstock.com;
+email.pajamagram.com            require_signed  email.pajamagram.com;
+email.paperlesspost.com         require_signed  "pmta.sailthru.com,email.paperlesspost.com";
+email.parts-express.com         require_signed  email.parts-express.com;
+email.payless.com               require_signed  "payless.com,email.payless.com";
+email-petsmart.com              require_signed  email-petsmart.com;
+email.petvalu.com               require_signed  email.petvalu.com;
+email.quickenloans.com          require_signed  email.quickenloans.com;
+email.renttherunway.com         require_signed  email.renttherunway.com;
+email.republicservices.com      require_signed  email.republicservices.com;
+emailrestaurant.com             require_signed  emailrestaurant.com;
+email.rewardsnetwork.com        require_signed  email.rewardsnetwork.com;
+email.riteaid.com               require_signed  email.riteaid.com;
+email.roku.com                  require_signed  email.roku.com;
+email.ross-simons.com           require_signed  email.ross-simons.com;
+e-mailr.roadrunnersports.com    require_signed  e-mailr.roadrunnersports.com;
+emails.aircanada.com            require_signed  emails.aircanada.com;
+email.santanderbank.com         require_signed  email.santanderbank.com;
+emails.buick.com                require_signed  emails.buick.com;
+emails.cafepress.com            require_signed  cafepress.com;
+e-mail.schneider-electric.com   require_signed  e-mail.schneider-electric.com;
+email.schoolsfirstfcu.org       require_signed  email.schoolsfirstfcu.org;
+email.scoresense.com            require_signed  email.scoresense.com;
+e-mail.scottrade.com            require_signed  e-mail.scottrade.com;
+email.scouting.org              require_signed  email.scouting.org;
+emails.directbuy.com            require_signed  emails.directbuy.com;
+email.secretescapes.com         require_signed  email.secretescapes.com;
+emails.evernote.com             require_signed  emails.evernote.com;
+emails.hertz.com                require_signed  emails.hertz.com;
+e-mail.shoecarnival.com         require_signed  e-mail.shoecarnival.com;
+emails.honda.com                require_signed  emails.honda.com;
+email.siriusxm.com              require_signed  email.siriusxm.com;
+email.snagajob.com              require_signed  email.snagajob.com;
+emails.nixle.com                require_signed  "emails.nixle.com,smtp.nixle.com";
+emails.nwruk.com                require_signed  emails.nwruk.com;
+email.sonyentertainmentnetwork.com require_signed  email.sonyentertainmentnetwork.com;
+emails.pitneybowes.com          require_signed  emails.pitneybowes.com;
+emails.rakuten.com              require_signed  emails.rakuten.com;
+emails.schwans.com              require_signed  emails.schwans.com;
+emails.supercuts.com            require_signed  emails.supercuts.com;
+email.stitchfix.com             require_signed  email.stitchfix.com;
+emails.toptenreviews.com        require_signed  emails.toptenreviews.com;
+emails.touchofclass.com         require_signed  touchofclass.com;
+emails.underarmour.com          require_signed  emails.underarmour.com;
+email.supermediastore.com       require_signed  email.supermediastore.com;
+emails.wyndhamhotelgroup.com    require_signed  emails.wyndhamhotelgroup.com;
+e-mails.wyndhamrewards.com      require_signed  e-mails.wyndhamrewards.com;
+emails.xfinity.com              require_signed  emails.xfinity.com;
+email.targetportraits.com       require_signed  email.targetportraits.com;
+email.tastingroom.com           require_signed  email.tastingroom.com;
+email.techmedianetwork.com      require_signed  email.techmedianetwork.com;
+email.teva.com                  require_signed  email.teva.com;
+email.thecompanystore.com       require_signed  "thecompanystore.com,email.thecompanystore.com";
+email.the-cover-store.com       require_signed  email.the-cover-store.com;
+email.ticketmaster.com          require_signed  email.ticketmaster.com;
+email.timewarnercable.com       require_signed  email.timewarnercable.com;
+email.toms.com                  require_signed  email.toms.com;
+email.toyotaforklifts.com       require_signed  email.toyotaforklifts.com;
+email.travelchannel.com         require_signed  email.travelchannel.com;
+email.travelzoo.com             require_signed  email.travelzoo.com;
+email.ugg.com                   require_signed  email.ugg.com;
+emailusa.coca-cola.com          require_signed  emailusa.coca-cola.com;
+email.usbank.com                require_signed  email.usbank.com;
+email.vimeo.com                 require_signed  email.vimeo.com;
+email.vudu.com                  require_signed  email.vudu.com;
+email-weightwatchers.com        require_signed  email-weightwatchers.com;
+email.weightwatchers.com        require_signed  email.weightwatchers.com;
+email.wetransfer.com            require_signed  email.wetransfer.com;
+email.wholefoodsmarket.com      require_signed  email.wholefoodsmarket.com;
+email-winzip.com                require_signed  email-winzip.com;
+emailworldmarket.com            require_signed  emailworldmarket.com;
+email.wsfsbank.com              require_signed  email.wsfsbank.com;
+email.wyndhamvo.com             require_signed  email.wyndhamvo.com;
+email.zappos.com                require_signed  email.zappos.com;
+email.zazzle.com                require_signed  zazzle.com;
+email.zionlodge.com             require_signed  email.zionlodge.com;
+emarketing.sixers.com           require_signed  emarketing.sixers.com;
+e-marriott.com                  require_signed  e-marriott.com;
+e.mars.com                      require_signed  mail.fagms.de;
+em.assurantsolutions.com        require_signed  em.assurantsolutions.com;
+e.match.com                     require_signed  e.match.com;
+embarqcreative.com              require_signed  embarqcreative.com;
+em.bbt.com                      require_signed  em.bbt.com;
+em.citizensbank.com             require_signed  em.citizensbank.com;
+em.drugstorenews.com            require_signed  em.drugstorenews.com;
+emerika.com                     require_signed  emerika.com;
+emessage.njezpass.net           require_signed  amazonses.com;
+e.metlifeyourlife.com           require_signed  e.metlifeyourlife.com;
+e.metmuseum.org                 require_signed  e.metmuseum.org;
+em.ftd.com                      require_signed  em.ftd.com;
+em.hollandamerica.com           require_signed  em.hollandamerica.com;
+e.micromark.com                 require_signed  e.micromark.com;
+emilyslist.org                  signed_white    bounce.bluestatedigital.com;    // some unsigned mail via bluestatedigital
+emirates.email                  require_signed  emirates.email;
+emjreviews.com                  require_signed  zcsend.net;
+eml.condenast.com               require_signed  eml.condenast.com;
+em.mandalaybay.com              require_signed  em.mandalaybay.com;
+em.mgmnationalharbor.com        require_signed  em.mgmnationalharbor.com;
+em.mgmresorts.com               require_signed  em.mgmresorts.com;
+em.newyorknewyork.com           require_signed  em.newyorknewyork.com;
+em.nordstrom.com                require_signed  em.nordstrom.com;
+e.montblanc.com                 require_signed  e.montblanc.com;
+e.mozilla.org                   require_signed  e.mozilla.org;
+em.redbox.com                   require_signed  em.redbox.com;
+em.sallybeauty.com              require_signed  em.sallybeauty.com;
+em.searshomeservices.com        require_signed  em.searshomeservices.com;
+em.searspartsdirect.com         require_signed  em.searspartsdirect.com;
+ems.travelers.com               require_signed  ems.travelers.com;
+e.murad.com                     require_signed  e.murad.com;
+em.vdara.com                    require_signed  em.vdara.com;
+em.venetian.com                 require_signed  em.venetian.com;
+em.westmarine.com               require_signed  em.westmarine.com;
+e.mypublisher.com               require_signed  e.mypublisher.com;
+em.zales.com                    require_signed  em.zales.com;
+e.nationalgeographic.com        require_signed  e.nationalgeographic.com
+e.netgear.com                   require_signed  e.netgear.com;
+e.newegg.com                    require_signed  newegg.com;
+enews.lenovo.com                require_signed  enews.lenovo.com;
+enews.pca.org                   require_signed  enews.pca.org;
+enews.swimstyle.com             require_signed  swimstyle.com;
+e.newyorktimesinfo.com          require_signed  e.newyorktimesinfo.com;
+engagebycell.com                require_signed  engagebycell.com;
+e.njadvancemedia.com            require_signed  e.njadvancemedia.com;
+e.nm.com                        require_signed  e.nm.com;
+e.nordstromrack.com             require_signed  e.nordstromrack.com;
+e.normthompson.com              require_signed  e.normthompson.com;
+entercom.com                    signed_white    entercom.com;                   // unsigned mail from their own mail servers, not listed in their spf record
+e.officedepot.com               require_signed  e.officedepot.com;
+eonline.e-vanguard.com          require_signed  e-vanguard.com;
+e.opensky.com                   require_signed  e.opensky.com;
+e.orbitzrewards.com             require_signed  e.orbitzrewards.com;
+e-organicgardening.com          require_signed  e-organicgardening.com;
+e.payroll.intuit.com            require_signed  e.payroll.intuit.com;
+e.pnc.com                       require_signed  e.pnc.com;
+e.pond5.com                     require_signed  e.pond5.com;
+e.proflowers.com                require_signed  e.proflowers.com;
+e.proplants.com                 require_signed  e.proplants.com;
+equalexchange.coop              require_signed  equalexchange.coop;
+e.ralphlauren.com               require_signed  e.ralphlauren.com;
+e.readyrefresh.com              require_signed  e.readyrefresh.com;
+e.restorationhardware.com       require_signed  e.restorationhardware.com;
+e.revolutiongolf.com            require_signed  e.revolutiongolf.com;
+e-rewards.com                   require_signed  e-rewards.com;
+eriksen.com                     require_signed  eriksen.ccsend.com;
+e-rodalesorganiclife.com        require_signed  e-rodalesorganiclife.com;
+e.safelite.com                  require_signed  e.safelite.com;
+esca.org                        require_signed  esca.ccsend.com;
+e.showmanagement.com            require_signed  e.showmanagement.com;
+e.shutterfly.com                require_signed  e.shutterfly.com;
+e-skillpath.com                 require_signed  e-skillpath.com;
+e.smilereminder.com             require_signed  smilereminder.com;
+e.snowbasin.com                 require_signed  e.snowbasin.com;                // needs spf, 200608._domainkey.e.snowbasin.com record not found
+esri.com                        signed_white    esri.com;                       // some unsigned mail via pphosted
+essentialhardware.com           signed_white    essentialhardware.com;          // some unsigned mail via klaviyomail.com
+e.staplespromotionalproducts.com require_signed  e.staplespromotionalproducts.com;
+e.starbucks.com                 require_signed  e.starbucks.com;
+e.starwoodhotelsemail.com       require_signed  e.starwoodhotelsemail.com;
+e.statefarm.com                 require_signed  e.statefarm.com;
+e.swimsuitsforall.com           require_signed  e.swimsuitsforall.com
+e.takepart.com                  require_signed  e.takepart.com;
+e.target.com                    require_signed  e.target.com;
+e.tdbank.com                    require_signed  e.tdbank.com;
+e.teavana.com                   require_signed  e.teavana.com;
+e.therealreal.com               require_signed  e.therealreal.com;
+et.npr.org                      require_signed  et.npr.org;
+et.nprstations.org              require_signed  et.nprstations.org;
+e.toyota.com                    require_signed  e.toyota.com;
+etrailer.com                    require_signed  icontactmail1.com;
+etrainingschool.com             require_signed  criticalimpactinc.com;
+e.tripadvisor.com               require_signed  e.tripadvisor.com;
+et.uber.com                     require_signed  et.uber.com;
+e-tui.transunion.com            require_signed  e-tui.transunion.com;
+e.turbotax.intuit.com           require_signed  e.turbotax.intuit.com;
+e.underarmour.com               require_signed  e.underarmour.com;
+e.urbanoutfitters.com           require_signed  e.urbanoutfitters.com;
+eurotechsoccer.com              require_signed  icontactmail3.com;
+e.usa.experian.com              require_signed  e.usa.experian.com;
+eu.sony.com                     require_signed  sony.onmicrosoft.com;
+e-vanguardcharitable.org        require_signed  e-vanguardcharitable.org;
+eventbriteacademy.com           require_signed  eventbriteacademy.com;
+eventbrite.com                  require_signed  "eventbrite.com,eventbrite-com.20150623.gappssmtp.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+events.aegpresents.com          require_signed  events.aegpresents.com;
+everbridge.net                  require_signed  everbridge.net;
+everkerr.com                    require_signed  everkerr.com;
+everlane.com                    require_signed  everlane.com;
+everydayhealth.com              require_signed  everydayhealth.com;
+e.vitaminshoppe.com             require_signed  e.vitaminshoppe.com;
+e.walgreens.com                 require_signed  e.walgreens.com;
+e.washingtonpost.com            require_signed  e.washingtonpost.com;
+e.westernjournalism.com         require_signed  e.westernjournalism.com;
+e.winecountrygiftbaskets.com    require_signed  e.winecountrygiftbaskets.com;
+e.wintersilks.com               require_signed  e.wintersilks.com;
+ewomennetwork.com               signed_white    ewomennetwork.com;
+exacttarget.change.org          require_signed  exacttarget.change.org;
+exchange.calstatela.edu         require_signed  csula.onmicrosoft.com;
+exhibitoronline.co              require_signed  exhibitoronline.co;
+exlevents.com                   require_signed  exlevents.com;
+explore.oceaniacruises.com      require_signed  explore.oceaniacruises.com;
+explore.pinterest.com           require_signed  explore.pinterest.com;
+explore.thenorthface.com        require_signed  explore.thenorthface.com;
+expolinc.us                     signed_white    expolinc.ccsend.com;            // some unsigned mail from their outbound servers, no spf record
+exponation.net                  require_signed  "auth.ccsend.com,icontactmail1.com";
+extracare.cvs.com               require_signed  extracare.cvs.com;
+exworkscapital.com              signed_white    198.memberemail.com;            // some unsigned mail via exacttarget, might be spam
+eystudios.com                   require_signed  eystudios.ccsend.com;
+e.zulily.com                    require_signed  e.zulily.com;
+ezup.com                        signed_white    "ezup.com,ezup.onmicrosoft.com";    // some other unsigned mail via quotevalet.com
+facebookmail.com                require_signed  facebookmail.com;
+fairmontemailcommunications.com require_signed  fairmontemailcommunications.com;
+falconfinancialservices.net     require_signed  spsend.com;
+familybase.vzw.com              require_signed  email.familybase.vzw.com;
+familytreedna.com               require_signed  familytreedna.com;
+famous-smoke.com                require_signed  famous-smoke.com;
+fanduelmail.com                 require_signed  fanduelmail.com;
+fanshop.mlblists.com            require_signed  fanshop.mlblists.com;
+fans.legacyrecordings.com       require_signed  fans.legacyrecordings.com;
+farmsanctuary.org               require_signed  mta-bbcspool.convio.net;
+fashionbizinc.org               require_signed  fashionbizinc.ccsend.com;
+fastspring.com                  require_signed  fastspring.com;
+fedbarlive.org                  require_signed  em.secureserver.net;
+fedex.com                       require_signed  fedex.com;
+fedgovconnect.org               require_signed  fedgovconnect-org.20150623.gappssmtp.com;
+feedvisor.com                   require_signed  "feedvisor-com.20150623.gappssmtp.com,feedvisor.com";
+feliciansisters.org             require_signed  feliciansisters.onmicrosoft.com;
+fidf.org                        require_signed  "bounce.bluestatedigital.com,auth.ccsend.com";
+fiercehealthpayer.com           require_signed  fiercehealthpayer.com;
+fightforreform.org              signed_white    bounce.bluestatedigital.com;    // some unsigned mail from bluestate
+fileandservedelaware.com        require_signed  fileandserve.com;
+filmadelphia.org                signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+firebirdpresort.com             require_signed  firebirdpresort.onmicrosoft.com;
+firecracker10k.org              require_signed  icontactmail4.com;
+firefox.com                     require_signed  firefox.com;
+firstleaf.club                  require_signed  firstleaf.club;
+fitbit.com                      require_signed  email.fitbit.com
+fitzgeraldphoto.com             require_signed  emlr2.com;
+fivethirtyeight.com             require_signed  fivethirtyeight.com;
+fixthedebt.org                  require_signed  bounce.bluestatedigital.com;
+fladems.com                     signed_white    "fladems.com,bounce.bluestatedigital.com";
+fladems.org                     signed_white    bounce.bluestatedigital.com;
+flagandbanner.com               require_signed  omktmail2.com;
+flaticon.com                    require_signed  "mandrillapp.com,flaticon.com";
+flaviar.com                     require_signed  flaviar.com;
+flickr.com                      require_signed  flickr.com;
+fly.com                         require_signed  fly.com;
+fmidm.com                       signed_white    "fmidm.com,fmidirectmail.onmicrosoft.com";  // some unsigned mail via their own servers
+followmyhealth.com              require_signed  email.followmyhealth.com;
+fontexplorerx.com               signed_white    email.monotype.com;             // some unsigned mail from salesforce
+foolsubs.com                    require_signed  foolsubs.com;
+footsolutions.com               require_signed  footsolutions.com;
+foreseeresults.com              require_signed  4cresults.com;
+foreupsoftware.com              require_signed  foreupsoftware.com;
+foxcreative.net                 signed_white    emlr2.com;                      // some unsigned mail via ms outlook
+freeconference.com              require_signed  freeconference.com;
+freedomforallamericans.org      require_signed  bounce.bluestatedigital.com;
+freepik-mail.com                require_signed  freepik-mail.com;
+from.ieee.org                   require_signed  from.ieee.org;
+fsshelpdesk.org                 require_signed  news.fedhelpdesk.org;
+fult.com                        require_signed  fultonbank.onmicrosoft.com;
+gahmusa.org                     require_signed  gahmusa.org;                    // cgale unsubscribed 2017-06-28
+gamechanger.io                  require_signed  gamechanger.io;
+gate1mail.com                   require_signed  gate1mail.com;
+gc.email.amazon.com             require_signed  amazon.com;                     // gift cards
+gcihealth.com                   require_signed  yrb.onmicrosoft.com;
+generation-brands.com           require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+genghisgrill.com                require_signed  "pxsmail.com,khansklub.pxsmail.com";
+geocaching.com                  require_signed  geocaching.com;
+gershmany.org                   signed_white    mail196.atl61.mcsv.net;
+gerstmangroup.com               require_signed  questservicegroup.ccsend.com;
+ges.com                         signed_white    "ges.com,viadcorp.onmicrosoft.com";
+getjibjab.com                   require_signed  getjibjab.com;
+ggimageusa.com                  require_signed  "ggimageusa-com.20150623.gappssmtp.com,smtpserver.email,smtpsendmail.com";
+gillians.com                    require_signed  gillians.ccsend.com;
+girlscoutsla.org                require_signed  girlscoutsla.org;
+glassdoor.com                   require_signed  glassdoor.com;
+glassesusa.com                  require_signed  bronto.com;
+globalmasstransit.net           require_signed  cvent-planner.com;
+go.coachup.com                  require_signed  go.coachup.com;
+godaddy.com                     require_signed  godaddy.com;
+gofundme.com                    require_signed  "gofundme.com,email.gofundme.com";
+go.intervalworld.com            require_signed  go.intervalworld.com;
+gokdm.com                       require_signed  gokdm.ccsend.com;
+gokhalemethod.com               require_signed  gokhalemethod.com;
+googlemail.com                  require_signed  googlemail.com;
+gopac.org                       signed_black    icontactmail1.com;              // survey spam
+gophercentral.com               require_signed  gophercentral.com;
+gotowebinar.com                 require_signed  gotowebinar.com;
+govbrief.us                     require_signed  govbrief.us;
+gov-con.com                     require_signed  icontactmail2.com;
+govsubscriptions.michigan.gov   require_signed  govsubscriptions.michigan.gov;
+gpcc.com                        require_signed  gpcc.com;
+grabcad.com                     require_signed  grabcad.com;
+grandopera.org                  require_signed  grandopera.ccsend.com;
+graphiccommunications.us        require_signed  graphiccommunications.onmicrosoft.com;
+greatist.com                    require_signed  greatist.com;
+greenbiz.com                    require_signed  greenbiz.com;
+greenforall.org                 require_signed  greenforall.org;
+greenphillyblog.com             require_signed  "gmail.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+greensecurityllc.com            require_signed  netorgft1001345.onmicrosoft.com;
+greenvelope.com                 require_signed  greenvelope.com;
+greyhawk.com                    require_signed  "greyhawkna.onmicrosoft.com,*.ccsend.com";
+greystar.com                    require_signed  "greystar365.onmicrosoft.com,entrata.com";
+grizzly.com                     require_signed  grizzly.com;
+groove3.com                     require_signed  groove3.com;
+grundoon.net                    require_signed  grundoon.onmicrosoft.com;
+gsa-cms.com                     require_signed  gsa-cms.com;
+gsb.columbia.edu                require_signed  "columbiabusiness.onmicrosoft.com,icontactmail2.com";
+gtcsocial.com                   require_signed  gtcsocial.com;
+gusto.com                       require_signed  gusto.com;
+h1.hilton.com                   require_signed  h1.hilton.com;
+h1.hiltonhhonors.com            require_signed  h1.hiltonhhonors.com;
+h1.hiltonhonors.com             require_signed  h1.hiltonhonors.com;
+habitatncc.org                  require_signed  habitatncc.ccsend.com;
+halfoffdeal.com                 require_signed  halfoffdeal.com;
+halpernlevy.com                 require_signed  halpernandlevy.onmicrosoft.com;
+harborfreight.com               require_signed  harborfreight-com.20150623.gappssmtp.com;
+harborfreightemail.com          require_signed  harborfreightemail.com;
+hardrockhotelsd.com             require_signed  zmaildirect.com;
+harley-davidson.rsys2.com       require_signed  rsys2.com;
+harryanddavid-email.com         require_signed  harryanddavid-email.com;
+harting.com                     require_signed  mktroute.com;
+hauptwerk.com                   require_signed  hauptwerk.com;
+havenadoptions.com              require_signed  havenadoptions-com.20150623.gappssmtp.com;
+hbham.com                       require_signed  hbham.com;
+hcconstructors.com              require_signed  pwcusa.ccsend.com;
+healthcarefinancenews.com       require_signed  healthcarefinancenews.com;
+healthcare.gov                  require_signed  healthcare.gov;
+healthcareinfosecurity.com      require_signed  healthcareinfosecurity.com;
+healthcareitnews.com            require_signed  healthcareitnews.com;
+healthequity.com                require_signed  healthequity.com;
+healthjobs.com                  require_signed  healthjobs.com;
+hearthandhome.com               require_signed  hearthandhome.com;
+hellofresh.com                  require_signed  hellofresh.com;
+hello.generalassemb.ly          require_signed  hello.generalassemb.ly;
+hellonomad.com                  require_signed  hellonomad.com;
+hello.readyrefresh.com          require_signed  hello.readyrefresh.com;
+hellotrade.com                  require_signed  hellotrade.com;
+help.aabacosmallbusiness.com    require_signed  help.aabacosmallbusiness.com;
+helpyourtaxclients.com          require_signed  helpyourtaxclients.com;
+henningers.com                  require_signed  icontactmail1.com;
+heritagebusiness.com            signed_white    "heritagebusiness.com,heritagebusiness.onmicrosoft.com,evolvedoffice.com";  // some missing dkim keys in dns
+hhglobal.com                    require_signed  hhglobal.com;
+hhgreggemail.com                require_signed  hhgreggemail.com;
+hhsportsandevents.com           require_signed  hersheyha.onmicrosoft.com;
+hicastsports.com                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+highimpact.com                  require_signed  "highimpact.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+hightailmail.com                require_signed  "hightailmail.com,*.hubspotemail.net,*.hubspot.com";
+himssmedia.com                  require_signed  himssmedia.com;
+hired.com                       require_signed  hired.com;
+hive.com                        require_signed  "hive.com,hive-com.20150623.gappssmtp.com";
+hmc.edu                         require_signed  hmc2.onmicrosoft.com;
+holosonics.com                  require_signed  holosonics.ccsend.com;
+holts.com                       require_signed  icontactmail1.com;
+homeaway.com                    require_signed  homeaway.com;
+homedepot.com                   signed_white    homedepot.com;                  // some unsigned mail via salesforce from customer service
+home-mail.sophos.com            require_signed  home.sophos.com;
+hometalk.com                    require_signed  "hometalk.com,icontactmail2.com";
+hometalkmedia.com               require_signed  hometalkusa.ccsend.com;
+honeywell.com                   require_signed  honeywell.com;
+hootsuite.com                   require_signed  hootsuite.com;
+hospitalitydental.com           require_signed  hospitalitydental.ccsend.com;
+houseofgeoscience.org           require_signed  "sendgrid.info,mailplus.nl";
+houzz.com                       require_signed  houzz.com;
+hq.acm.org                      require_signed  acmhq.onmicrosoft.com;
+htallc.com                      require_signed  "smtpsendmail.com,smtp.com";
+hulumail.com                    require_signed  hulumail.com;
+hungryroot.com                  require_signed  "hungryroot.com,email.hungryroot.com";
+huntingpa.com                   require_signed  huntingpa.com;
+hybris.com                      require_signed  myrandf.com;
+hyundaicustomerfeedback.com     require_signed  hyundaicustomerfeedback.com;
+hyundaimotors.com               require_signed  hyundaimotors.com;
+iamericaaction.org              signed_white    bounce.bluestatedigital.com;    // some unsigned via bluestatedigital as well
+ibotta.com                      require_signed  ibotta.com;
+idealprec.com                   require_signed  idealprec.ccsend.com;
+identity-morningstar.com        require_signed  identity-morningstar.com;
+identityprotection.norton.com   require_signed  identityprotection.norton.com;
+idsa.org                        require_signed  idsa.ccsend.com;
+ieee.org                        require_signed  "ieee-org.20150623.gappssmtp.com,cmail19.com,cmail20.com";  // some unsigned survey mail via confirmit.com that fails spf
+ientry.info                     require_signed  ientry.net;
+ifixit.com                      require_signed  ifixit.com;
+ifly.alaskaair.com              require_signed  ifly.alaskaair.com;
+ift.org                         signed_white    "connect.ift.org,ift1.onmicrosoft.com"; // broken sigs from connect.ift.org
+iheartmedia.com                 signed_white    iheartmedia.onmicrosoft.com;
+imail.register.com              require_signed  imail.register.com;
+imprintprojects.com             require_signed  imprintprojects.com;
+improvementscatalog-email.com   require_signed  improvementscatalog-email.com;
+imt-mach.com                    require_signed  imt-mach.com;
+inbound.com                     require_signed  inbound.com;
+inc2gov.com                     require_signed  "smtp.com,smtpsend.com";
+industrymarketingsolutions.com  require_signed  mail-202-169.rm0005.net;
+infinitytools.com               require_signed  infinitytools.ccsend.com;
+info1.networksolutions.com      require_signed  info1.networksolutions.com;
+info4.citi.com                  require_signed  info4.citi.com;
+info6.accountonline.com         require_signed  info6.accountonline.com;
+info6.citi.com                  require_signed  info6.citi.com;
+info.bitdefender.com            require_signed  info.bitdefender.com;
+info.citibank.com               require_signed  "citibank.com,info.citibank.com";
+info.citrixdelivers.com         require_signed  info.citrixdelivers.com;
+info.comenity.net               require_signed  info.comenity.net;
+info.cynopsis.com               require_signed  "info.cynopsis.com,mktdns.com";
+info.key.com                    require_signed  info.key.com;
+info.mountaincreek.com          require_signed  info.mountaincreek.com;
+info.prioritypass.com           require_signed  info.prioritypass.com;
+information.nature.com          require_signed  information.nature.com;
+info.stagnitomedia.com          require_signed  stagnito.cfmvmail.com;
+ingrammicro.com                 require_signed  "leadflight.net,pb-dynmktg.com";
+inhousejobalert.com             require_signed  inhousejobalert.com;
+inhousejobsalerts.com           require_signed  inhousejobsalerts.com;
+inlandgroup.com                 require_signed  inlandgroup.com;
+inmarket.com                    require_signed  inmarket.com;
+insideapple.apple.com           require_signed  insideapple.apple.com;
+insideradio.com                 require_signed  e2ma.net;
+inspire.pinterest.com           require_signed  inspire.pinterest.com;
+intacct.com                     require_signed  intacct.com;
+interactone.com                 require_signed  "mx-senderer-02.com,mx-senderer-03.com";
+interior-specialties.com        signed_white    "appriver3651009419.onmicrosoft.com,smtpcorp.com";
+intervalintl.com                require_signed  iilg.onmicrosoft.com;
+inthenewsonline.com             require_signed  "*.shared.hubspot.com";
+intuit.com                      require_signed  intuit.com;
+intuitsolutions.net             require_signed  "affinitylive.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+invidtech.com                   require_signed  "auth.ccsend.com,zcsend.net";
+invista.com                     signed_white    "invista.com,kochind.onmicrosoft.com";  // some broken signatures from microsoft via pphosted
+invntree.com                    require_signed  invntree.com;
+ipipeline.com                   require_signed  ipipeline.onmicrosoft.com;
+iriworldwide.com                require_signed  iriworldwide.com;
+ismgcorp.com                    require_signed  ismgcorp.com;
+ispringmail.com                 require_signed  ispringmail.com;
+issuumail.com                   require_signed  issuumail.com;
+ithirings.com                   require_signed  messaging-master.net;
+jackseeds.com                   require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+jacpac.org                      require_signed  jacpac.ccsend.com;
+jameco.com                      require_signed  jameco.com;
+jamestaylor.com                 require_signed  sh01.musvc.com;
+jamf.com                        require_signed  "jamfsw.onmicrosoft.com,jamf.com";
+jcresorts.com                   require_signed  jcresorts.com;
+jdrf.org                        signed_white    jdrf.org;                       // some unsigned mail via convio not included in their spf record
+jenjudge.com                    require_signed  emlr2.com;
+jet.com                         signed_white    jet.com;                        // some unsigned mail from mailchimp that fails spf
+jewelscent.com                  require_signed  delivery.klaviyomail.com;
+jewishphilly.org                require_signed  "auth.ccsend.com,jewishphilly.ccsend.com,jewishphilly-org.20150623.gappssmtp.com";
+jhu.edu                         signed_white    "e2ma.net,publicaster.com,bsftransmit7.com,armssoftware.com";     // possibly other signers
+jibjab.com                      require_signed  jibjab.com;
+jimjohnson4governor.com         require_signed  bounce.bluestatedigital.com;
+jkj.com                         require_signed  "jkj.com,jkji.onmicrosoft.com";
+job.alerted.org                 require_signed  job.alerted.org;
+jobrapidoalert.com              require_signed  jobrapidoalert.com;
+jobs2careers.com                require_signed  jobs2careers.com;
+jobs.mpr.alerted.org            require_signed  mpr.alerted.org;
+johncanningco.com               require_signed  spsend.com;
+johnmaxwell.com                 require_signed  email.johnmaxwell.com;
+joshshapiro.org                 signed_white    bounce.bluestatedigital.com;
+jstor.org                       require_signed  jstor.org;
+judsonsart.com                  require_signed  icontactmail3.com;
+justice.org                     require_signed  justice.org;
+kaarmadealer.com                require_signed  kaarmadealer.com;
+kaiserhealthnews.org            require_signed  kff.org;
+kaleidescape.com                require_signed  kaleidescape.com;
+kamalaharris.org                signed_white    kamalaharris.org;
+kantar.com                      require_signed  "ktglbuc.onmicrosoft.com,icontactmail6.com";
+kantarmedia.com                 require_signed  "kantarmedia.com,icontactmail6.com";
+katiemcginty.com                require_signed  bounce.myngp.com;
+kaydaly.com                     require_signed  bluehornet.com;
+kbkg.net                        require_signed  kbkg.net;
+kcrw.org                        signed_white    "kcrw-org.20150623.gappssmtp.com,*.hubspot.com";    // unsigned from traffic@
+kennedy-center.org              require_signed  kennedy-center.org;
+kep.com                         require_signed  kep.ccsend.com;
+kerio.com                       require_signed  kerio.com;
+keswicktheatre.com              signed_white    keswicktheatre.ccsend.com;      // some unsigned mail from their own servers
+keystoneline.com                require_signed  keystoneline.ccsend.com;
+kik.com                         require_signed  action.kik.com;
+kingarthurflour.com             require_signed  kingarthurflour.com;
+knoll.com                       require_signed  knoll.com;
+knotandrope.com                 require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+knowledge.onlinecompliancepanel.net require_signed  knowledge.onlinecompliancepanel.net;
+kofc.org                        require_signed  www-kofc.ccsend.com;
+komenphiladelphia.org           require_signed  komenphiladelphia.org;
+kqllc01.com                     require_signed  kqllc01.com;
+kremp.com                       signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";    // some other unsigned mail, no spf record
+kw.com                          require_signed  kw.com;
+labcorp.com                     require_signed  labcorp.com;
+laboratorytesting.com           require_signed  laboratorytesting.com;
+lacity.org                      require_signed  lacity-org.20150623.gappssmtp.com;
+ladygrace.com                   require_signed  ladygrace.com;
+lakearrowheadchamber.com        signed_white    lakearrowhead.ccsend.com;       // some unsigned mail via unifiedlayer.com
+landarq.com                     require_signed  landarq-com.20150623.gappssmtp.com;
+lanierlawfirm.com               require_signed  cmail20.com;
+laopera.org                     require_signed  "laopera.org,laopera.onmicrosoft.com";
+largeformatreview.com           require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+larryjohnsonspeaker.com         require_signed  priorityoneemail.com;
+latinworks.com                  require_signed  latinworks.onmicrosoft.com;
+law360.com                      require_signed  "law360.com,mailings-alt.law360.com";
+lawline.com                     require_signed  icontactmail1.com;
+lawreviewcle.com                require_signed  lawreviewcle.com;
+lawyertechinfo.com              require_signed  "icontactmail2.com,icontactmail6.com";
+lazorlaw.com                    require_signed  johnlazor.onmicrosoft.com;
+lbccc.org                       require_signed  lbccc.ccsend.com;
+lcius.com                       require_signed  lcius.onmicrosoft.com;
+ledbury.com                     require_signed  ledbury.com;
+leerburg.com                    require_signed  amazonses.com;
+legalnewsupdate.com             require_signed  legalnewsupdate.ccsend.com;
+legrand.us                      require_signed  grpleg.onmicrosoft.com;
+lehighvalleychamber.org         require_signed  lehighvalleychamber.ccsend.com;
+lexisnexis.com                  require_signed  lexisnexis.com;
+lexmachina.com                  require_signed  lexmachina.com;
+lexusenform.com                 require_signed  lexusenform.com;
+lfw-media.com                   require_signed  lfw-media.com;
+liberty247.net                  require_signed  liberty247.net;
+libertyheadlines.com            require_signed  libertyheadlines.com;
+libertymutual.com               signed_white    libertymutual.com;              // some unsigned mail from their own servers
+lifeandstylemag.com             require_signed  lifeandstylemag.com;
+lightblocks.com                 require_signed  triggeredemailservice.com;
+lightyearmg.com                 require_signed  lightyearmg-com.20150623.gappssmtp.com;
+lillarogers.com                 require_signed  lillarogers.ccsend.com;
+lindenmeyr.com                  require_signed  lindenmeyrmunroe.ccsend.com;
+linkedin.com                    require_signed  linkedin.com;
+linuxjournalservices.com        require_signed  linuxjournalservices.com;
+liquidityservices.com           require_signed  mandrillapp.com;
+liquor.com                      require_signed  liquor.com;
+listedby.com                    require_signed  listedby.com;
+listeneremail.net               require_signed  listeneremail.net;
+list.moveon.org                 require_signed  "list.moveon.org,moveon.org";
+littsquality.com                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+liveperson.com                  require_signed  liveperson.com;
+llnl.gov                        require_signed  doellnl.onmicrosoft.com;
+loanservicing.bankofamerica.com require_signed  loanservicing.bankofamerica.com;
+localjobservice.com             require_signed  localjobservice.com;
+logees.com                      signed_white    "logees.com,logees.ccsend.com"; // some unsigned mail from their own servers that fails spf, broken sigs from their own server
+logistick.com                   require_signed  logistick.com;
+logomark.com                    require_signed  logomark.onmicrosoft.com;
+longbeachhonda.com              require_signed  "xtime.com,dealersocket.com";
+lovethe88.com                   require_signed  lovethe88-com.20150623.gappssmtp.com;
+loyaltyalliance.com             require_signed  "loyaltyalliance.com,mx-senderer-02.com,mx-senderer-03.com";
+loyalty.bloomingdales.com       require_signed  loyalty.bloomingdales.com;
+lqa.com                         require_signed  cp20.com;
+l.soma.com                      require_signed  l.soma.com;
+ltsc.ucsb.edu                   require_signed  ltsc.ucsb.edu;
+lucidchart.com                  require_signed  lucidchart.com;
+luv.southwest.com               require_signed  luv.southwest.com;
+l.whitehouseblackmarket.com     require_signed  l.whitehouseblackmarket.com;
+lydiasuniforms.com              signed_white    lydiasuniforms.com;             // some unsigned mail from their own servers
+lyftmail.com                    require_signed  lyftmail.com;
+lynda.com                       require_signed  lynda.com;
+m1.eml.beau-coup.com            require_signed  m1.eml.beau-coup.com;
+maadvisor.com                   require_signed  cvent-planner.com;
+maakenterprises.com             require_signed  maakenterprises.com;
+machinezone.com                 require_signed  machinezone.com;
+macsales.com                    require_signed  macsales.com;
+magnaplate.com                  require_signed  magnaplate.com;
+mag.southernliving.com          require_signed  mag.southernliving.com;
+mail-1.bizjournals.com          require_signed  bizjournals.com;
+mail1.wellsfargo.com            require_signed  mail1.wellsfargo.com;
+mail2.gofarrewards.wellsfargo.com require_signed  mail2.gofarrewards.wellsfargo.com;
+mail5.avvo.com                  require_signed  mail5.avvo.com;
+mail7.creditkarma.com           require_signed  mail.creditkarma.com;
+mail.accounts.autodesk.com      require_signed  email.accounts.autodesk.com;
+mail.authorize.net              require_signed  mail.authorize.net;
+mail.bloombergbusiness.com      require_signed  mail.bloombergbusiness.com;
+mailcenter.usaa.com             require_signed  usaa.com;
+mail.change.org                 require_signed  mail.change.org;
+mailchimp.com                   require_signed  mailchimp.com;
+mail.citipricerewind.com        require_signed  mail.citipricerewind.com;       // stupid banks with multiple branding;
+mail.crateandbarrel.com         require_signed  mail.crateandbarrel.com;
+mail.elsevier.com               require_signed  mail.elsevier.com;
+mailer.birchbox.com             require_signed  mailer.birchbox.com;
+mailer.box.com                  require_signed  box.com;
+mailer.netflix.com              require_signed  netflix.com;
+mailer.shopify.com              require_signed  shopify.com;
+mail.eviteideas.com             require_signed  mail.eviteideas.com;
+mail.farmers.com                require_signed  mail.farmers.com;
+mail.glassdoor.com              require_signed  mail.glassdoor.com;
+mailhost.docuhost-net.com       require_signed  mailhost.docuhost-net.com;
+mail.hotels.com                 require_signed  mail.hotels.com;
+mail.imparture.us               require_signed  mail.imparture.us;
+mail.instagram.com              require_signed  mail.instagram.com;
+mail.medscape.com               require_signed  mail.medscape.com;
+mail.mlblists.com               require_signed  mail.mlblists.com;
+mail.onedrive.com               require_signed  mail.onedrive.com;
+mail.patient-message.com        require_signed  mail.patient-message.com;
+mail.paypal.com                 require_signed  mail.paypal.com;
+mail.pbteen.com                 require_signed  mail.pbteen.com;
+mail.pictureframes.com          require_signed  mail.pictureframes.com;
+mail.potterybarn.com            require_signed  mail.potterybarn.com;
+mail.potterybarnkids.com        require_signed  mail.potterybarnkids.com;
+mail.rejuvenation.com           require_signed  mail.rejuvenation.com;
+mail.remind.com                 require_signed  remind.com;
+mailreply.selectcomfort.com     require_signed  mailreply.selectcomfort.com;
+mail.service.thehartford.com    require_signed  mail.service.thehartford.com;
+mail.sharecare.com              require_signed  mail.sharecare.com;
+mail.sling.com                  require_signed  mail.sling.com;
+mail.society6.com               require_signed  mail.society6.com;
+mail.southcommmail.com          require_signed  mail.southcommmail.com;
+mail.stashrewards.com           require_signed  mail.stashrewards.com;
+mail.synchronybank.com          require_signed  mail.synchronybank.com;
+mail.synchronyfinancial.com     require_signed  mail.synchronyfinancial.com;
+mailva.evite.com                require_signed  mailva.evite.com;
+mail.vresp.com                  require_signed  vresp.com;
+mail.westelm.com                require_signed  mail.westelm.com;
+mail.whitehouse.gov             require_signed  mail.whitehouse.gov;
+mail.zillow.com                 require_signed  mail.zillow.com;
+mainewhitewater.com             require_signed  northcountryrivers.ccsend.com;
+maintain.se                     require_signed  minutemailer.com;
+makinmusic.com                  require_signed  makinmusic.ccsend.com;
+malwarebytes.com                require_signed  malwarebytes.com;
+mannapa.org                     require_signed  mannapa.ccsend.com;
+mapmywalk.underarmour.com       require_signed  mapmywalk.underarmour.com;
+mariahmarketing.com             require_signed  mariahmarketing-com.20150623.gappssmtp.com;
+marinemax.com                   require_signed  marinemax.com;
+marinsoftware.com               require_signed  marinsoftware.com;
+markbric.com                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+markcustom.com                  require_signed  ipengines.net;                  // seems to be mediasupply client
+marketing.ipsy.com              require_signed  marketing.ipsy.com;
+marketing.qdoba.com             require_signed  marketing.qdoba.com;
+marketplace.amazon.ca           require_signed  amazon.ca;
+marketplace.amazon.com          require_signed  amazon.com;
+martindalemail.com              require_signed  martindalemail.com;
+martindalenolo.com              require_signed  martindalenolo.com;
+mastrocomm.com                  require_signed  twisteddune.ccsend.com;
+matildajaneclothing-email.com   require_signed  matildajaneclothing-email.com;
+maxpedition.com                 require_signed  icontactmail1.com;
+mayo.edu                        signed_white    mayoclinic.com;                 // some unsigned via blackbaud (mailing list?), no spf record
+mcmorrowreports.com             require_signed  mcmorrowreport.ccsend.com;
+mcnichols.com                   require_signed  "mcnichols-com.20150623.gappssmtp.com,bronto.com";
+mcsservices.com                 require_signed  mcsservicesinc.onmicrosoft.com;
+mdvip.com                       require_signed  mdvip.com;
+meainfo.org                     require_signed  meainfo.org;
+media-blasters.com              require_signed  media-blasters-com.20150623.gappssmtp.com;
+mediabrains.com                 require_signed  mediabrains.com;
+media.ieee.org                  require_signed  media.ieee.org;
+medquestltd.com                 signed_white    medquest.ccsend.com;            // some unsigned mail from their own servers
+medstatix.com                   require_signed  medstatix.com;
+meltwaterpress.com              require_signed  meltwaterpress.com;
+member.americanexpress.com      require_signed  member.americanexpress.com;
+members.allmodern.com           require_signed  members.allmodern.com;
+members.angieslist.com          require_signed  members.angieslist.com;
+members.birchlane.com           require_signed  members.birchlane.com;
+members.collegexpress.com       require_signed  members.collegexpress.com;
+members.jossandmain.com         require_signed  members.jossandmain.com;
+member.starwoodhotelsemail.com  require_signed  member.starwoodhotelsemail.com;
+members.wayfair.com             require_signed  members.wayfair.com;
+menard.messages1.com            require_signed  menard.messages1.com;
+mentor-protege.net              require_signed  1pointemail.net;
+meredith.com                    require_signed  meredith.com;
+message.bbt.com                 require_signed  message.bbt.com;
+message.fedex.com               require_signed  message.fedex.com;
+message.merrilledge.com         require_signed  message.merrilledge.com;
+messages.autotrader.com         require_signed  messages.autotrader.com;
+message.scholastic.com          require_signed  message.scholastic.com;
+messages.cutco.com              require_signed  messages.cutco.com;
+messages.globalindustrial.com   require_signed  messages.globalindustrial.com;
+messages.homeaway.com           require_signed  messages.homeaway.com;
+messages.kbb.com                require_signed  messages.kbb.com;
+messages.medicinenet.com        require_signed  messages.medicinenet.com;
+messages.webmd.com              require_signed  messages.webmd.com;
+message.wine.com                require_signed  message.wine.com;
+messaging.usnews.com            require_signed  messaging.usnews.com;
+messaging.zoosk.com             require_signed  messaging.zoosk.com;
+metroexhibits.com               require_signed  metroexhibits.com;
+metuchensportsplex.com          require_signed  rockvillesports.ccsend.com;
+mfp.underarmour.com             require_signed  mfp.underarmour.com;
+mgmresorts.com                  require_signed  mgmresorts.com;
+mg.starbucks.com                require_signed  mg.starbucks.com;
+mic.com                         require_signed  mic.com;
+michaelkorsemail.com            require_signed  michaelkorsemail.com;
+microsoft.com                   require_signed  microsoft.com;
+microsoftonline.com             require_signed  microsoftonline.com;
+midjerseychamber.org            require_signed  midjerseychamber.ccsend.com;
+mileageplusshoppingnews.com     require_signed  mileageplusshoppingnews.com;
+mindbodygreen.com               require_signed  mindbodygreen.com;
+mindbodyonline.com              require_signed  "mindbodyonline.com,email.mindbodyonline.com";
+minico.com                      require_signed  criticalimpactinc.com;
+minime.nsta.org                 require_signed  minime.nsta.org;
+minnesotavikingsemail.com       require_signed  minnesotavikingsemail.com;
+miraclesuit.com                 require_signed  miraclesuit.com;
+ml.com                          require_signed  ct-mail.ml.com;
+mlivenyc.com                    require_signed  cvent-planner.com;
+mmsonline.com                   require_signed  mmsonline.com;
+mobiletechinc.com               require_signed  mobiletechinc.onmicrosoft.com;
+mobivity.com                    require_signed  mobivity.com;
+moes.com                        require_signed  email.punchh.com;
+momentumdash.com                require_signed  momentumdash.com;
+momentummgt.com                 require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+momscleanairforce.org           require_signed  server8839.e-activist.com;
+monster.com                     signed_white    monster.com;                    // some unsigned mail via mailsorter.be.tmpw.net;
+monsterequip.com                require_signed  icontactmail6.com;
+monsterscooterparts.com         require_signed  monsterscooterparts.com;
+morrishabitat.org               require_signed  morrishabitat.ccsend.com;
+mortgagebankamerica.com         require_signed  emarketfocus.com;
+mosacks.com                     require_signed  mg.mosacks.com;
+mosaic.buzz                     require_signed  mosaic728.onmicrosoft.com;
+movavi.com                      require_signed  "mandrillapp.com,movavi.com";
+moveon.org                      require_signed  list.moveon.org;
+movies.fandango.com             require_signed  movies.fandango.com;
+mp1.tripadvisor.com             require_signed  mp1.tripadvisor.com;
+mp.fitbit.com                   require_signed  mp.fitbit.com;
+mpma.net                        require_signed  mpma.ccsend.com;
+mrca.org                        require_signed  "smtpsendmail.com,smtp.com";
+mrtireservices.com              require_signed  mrtireservices.com;
+msccruisesusa.com               require_signed  contactlab.it;
+msmtvsales.com                  require_signed  iheartmedia.onmicrosoft.com;
+m.taxslayer.com                 require_signed  m.taxslayer.com;
+mtb.com                         require_signed  mtb.com;
+mtbopinions.com                 require_signed  mtbopinions.com;
+muckfestms.com                  require_signed  muckfestms.com;
+multibriefs.com                 require_signed  multibriefs.com;
+murphy4nj.com                   require_signed  "murphy4nj-com.20150623.gappssmtp.com,bounce.bluestatedigital.com";
+murphyforflorida.com            signed_white    bounce.bluestatedigital.com;
+musicacademy.org                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+musictogether.com               signed_white    musictogether.ccsend.com;       // some unsigned mail via mail.musictogether.com;
+mvsend.com                      require_signed  mvsend.com;
+mxtoolbox.com                   require_signed  mxtoolbox.com;
+myddi.com                       require_signed  myddi.com;
+myemma.com                      require_signed  myemma.com;
+my.erau.edu                     require_signed  myerauedu.onmicrosoft.com;
+myfinancialbodyguard.com        require_signed  myfinancialbodyguard-com.20150623.gappssmtp.com;
+myfitnesspal.com                require_signed  myfitnesspal.com;
+myhealth.stanfordhealthcare.org require_signed  stanfordhealthcare.onmicrosoft.com;
+myiclubonline.com               require_signed  amazonses.com;
+myicontickets.com               require_signed  infusionmail.com;
+mymaryandmartha.com             require_signed  mymaryandmartha.com;
+my.orbitz.com                   require_signed  my.orbitz.com;
+myperfectresume.com             require_signed  myperfectresume.com;
+myphillypark.org                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+mypromosupport.com              require_signed  mypromosupport.com;
+myrandf.com                     require_signed  myrandf.com;
+myschoolemails.com              require_signed  myschoolemails.com;
+mystubhub.com                   require_signed  mystubhub.com;
+na.email.aa.com                 require_signed  na.email.aa.com;
+nagr.org                        require_signed  nagr.org;
+nailgundepot.com                require_signed  "nailgundepot.com,auth.ccsend.com";
+nailiteinc.com                  require_signed  nailiteinc.ccsend.com;
+nationalgunrights.org           require_signed  nationalgunrights.org;
+nationallawfoundation.com       require_signed  nationallawfoundation.com;
+nationformarriage.org           require_signed  nationformarriage.org;          // needs spf for wrong keys from bluehornet
+natlmail.com                    require_signed  nationalmailmarketing.onmicrosoft.com;
+naturalinsight.com              signed_white    naturalinsight.onmicrosoft.com; // some unsigned mail from salesforce
+nature.org                      require_signed  "nature.org,mta-bbcspool.convio.net";
+navigant.com                    require_signed  navigant.com;
+navigantpace.com                require_signed  navigantpace.com;
+nazarethacademyhs.org           require_signed  nazarethacademyhs.onmicrosoft.com;  // seems to be thomasjpaul.com correspondent
+nazdar.com                      require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+nbstoremail.newbalance.com      require_signed  nbstoremail.newbalance.com;
+nccn.org                        require_signed  cvent-planner.com;
+nclgs.com                       require_signed  "nclgs.onmicrosoft.com,auth.ccsend.com";
+nd.edu                          require_signed  "nd.edu,imodules.com";
+ndia.org                        signed_white    mmsend.com;                     // some unsigned mail directly from ndia.org
+nea.org                         require_signed  actionnetwork.org;
+nedm.asus.com                   require_signed  nedm.asus.com;
+neilsonmarketing.com            require_signed  icontactmail2.com;
+nejm.org                        require_signed  nejm.org;
+nemanet.org                     signed_white    nemanet.ccsend.com;             // some unsigned mail via kintera.com
+networkafterwork.com            require_signed  networkafterwork.com;
+neuropathytreatmentgroup.com    require_signed  neuropathytreatmentgroup.com;
+newbay-media.com                require_signed  "newbay.cfmvmail.com,newbay2.cfmvmail.com";
+new.itunes.com                  require_signed  new.itunes.com;
+newletters.grccompliances.com   require_signed  newletters.grccompliances.com;
+news.alibris.com                require_signed  news.alibris.com;
+newsamerica.com                 require_signed  newsamerica-com.20150623.gappssmtp.com;
+news.bodybuilding.com           require_signed  news.bodybuilding.com;
+news.classiccarrestorationclub.com require_signed  news.classiccarrestorationclub.com;
+news.gucci.com                  require_signed  "news.gucci.com,contactlab.it";
+news.healthylifestylearena.com  require_signed  news.healthylifestylearena.com;
+news.hickoryfarms.com           require_signed  news.hickoryfarms.com;
+newsletter.247sports.com        require_signed  newsletter.247sports.com;
+newsletter.mail.moneyandmarkets.com require_signed  newsletter.mail.moneyandmarkets.com;
+newsletter.movietickets.email   require_signed  newsletter.movietickets.email;
+newsletter.newyorker.com        require_signed  newsletter.newyorker.com;
+newsletter.purposedriven.com    require_signed  newsletter.purposedriven.com;
+newsletters.care2.com           require_signed  care2.com;
+newsletter.selectquote.com      require_signed  newsletter.selectquote.com;
+newsletter.springer.com         require_signed  newsletter.springer.com;
+newsletter.tinder.com           require_signed  newsletter.tinder.com;
+news.monoprice.com              require_signed  news.monoprice.com;
+news.moo.com                    require_signed  news.moo.com;
+news.pcm.com                    require_signed  news.pcm.com;
+news.pier1.com                  require_signed  news.pier1.com;
+news-rodalesorganiclife.com     require_signed  news-rodalesorganiclife.com;
+news.shiftdailynews.com         require_signed  news.shiftdailynews.com;
+news.southcommmail.com          require_signed  news.southcommmail.com;         // needs spf for broken signatures
+news.tinyprints.com             require_signed  news.tinyprints.com;
+news.united.com                 require_signed  news.united.com;
+news.weddingpaperdivas.com      require_signed  news.weddingpaperdivas.com;
+newwavetech.com                 signed_white    icontactmail3.com;              // some unsigned mail directly from their servers
+nexcopy.com                     require_signed  nexcopy-com.20150623.gappssmtp.com;
+nextdayflyers.com               require_signed  nextdayflyers.com;
+nfib.org                        require_signed  nfib.org;
+nfibweekly.bulletinmedia.com    require_signed  bulletinmedia.com;
+nice.com                        require_signed  nice.com;
+nickeygregory.com               require_signed  nickeygregory-com.20150623.gappssmtp.com;
+nielsen-email.com               require_signed nielsen-email.com;
+nisolo.com                      require_signed  nisolo.com;
+njbiz.com                       require_signed  "journalpub1.onmicrosoft.com,njbiz.com";
+njsba.com                       signed_white    "njsba.com,bluehornet.com";     // some broken signatures from bluehornet
+nlmdlr.com                      require_signed  pool01.imakenews.net;
+nmk.printegra.com               require_signed  nmk.printegra.com;
+noreply1.ebay.com               require_signed  ebay.com;
+noreply.autodesk.com            require_signed  noreply.autodesk.com;
+noreply.org                     signed_black    sendgrid.net;                   // apple support scam
+noreply.stockwatch.com          require_signed  noreply.stockwatch.com;
+northcountryrivers.com          require_signed  northcountryrivers.ccsend.com;
+northlightcolor.com             require_signed  northlightcolor.ccsend.com;
+northwestern.edu                require_signed  iwsend.com;
+notices.rei.com                 require_signed  notices.rei.com;
+notification.capitalone.com     require_signed  notification.capitalone.com
+notification.intuit.com         require_signed  notification.intuit.com;
+notifications.intuit.com        require_signed  notifications.intuit.com;
+notifications.pinterest.com     require_signed  notifications.pinterest.com;
+notifications.wm.com            require_signed  notifications.wm.com;
+notify.meetmemail.com           require_signed  notify.meetmemail.com;
+notify.transunion.com           require_signed  notify.transunion.com;
+novitex.com                     require_signed  pbmsnovitex.onmicrosoft.com;
+npm.org                         require_signed  "npm-org.20150623.gappssmtp.com,smtp.com";
+nrailafrontlines.com            require_signed  nrailafrontlines.com;
+nsbaadvocate.com                require_signed  mmsend.com;
+nyiad.edu                       require_signed  icontactmail1.com;
+oakwoodveneer.com               require_signed  em.secureserver.net;
+ocusoft.com                     require_signed  "cmail19.com,cmail20,com";
+ocwen.com                       require_signed  ocwen.com;
+oes.macys.com                   require_signed  oes.macys.com;
+oe.target.com                   require_signed  oe.target.com;
+ofakind.com                     require_signed  ofakind.com;
+ofa.us                          require_signed  ofa.us;
+offers.aarp.org                 require_signed  offers.aarp.org;
+offers.aviatormastercard.com    require_signed  offers.aviatormastercard.com;
+offers.dominos.com              require_signed  offers.dominos.com;
+offer.snapfish.com              require_signed  offer.snapfish.com;
+offers.princess.com             require_signed  offers.princess.com;
+offset.com                      require_signed  offset.com;
+ogunquitplayhouse.org           require_signed  ogunquitplayhouse.org;
+oldnavy.com                     require_signed  oldnavy.com;
+olmcatholicschool.com           require_signed  "olmcatholicschool-com.20150623.gappssmtp.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+olmrcs.com                      require_signed  olmrcs-com.20150623.gappssmtp.com;
+omegamoulding.com               signed_white    omega-moulding-company.ccsend.com;  // unsigned mail from their own servers, broken spf record so no fallback
+onlineaudiotraining.com         require_signed  onlineaudiotraining.com;
+online.costco.com               require_signed  online.costco.com;
+online.essentra.com             require_signed  online.essentra.com;
+onmogul.com                     require_signed  onmogul.com;
+onvia.com                       require_signed  onvia.com;
+opayq.com                       require_signed  opayq.com;
+openemail.americanexpress.com   require_signed  openemail.americanexpress.com;
+opentable.com                   require_signed  "opentable.com,contact.opentable.com";
+oppenheimerfunds.com            require_signed  oppenheimerfunds.com;
+ops.bloomingdales.com           require_signed  ops.bloomingdales.com;
+optx2020.com                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+orastudios.com                  require_signed  orastudios.com;
+orbuscompany.com                require_signed  orbuscompany.onmicrosoft.com;
+orbus.com                       require_signed  "orbuscompany.onmicrosoft.com,orbus.ccsend.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+order.potterybarnkids.com       require_signed  order.potterybarnkids.com;
+orders.homedepot.com            require_signed  orders.homedepot.com;
+oriphe.com                      require_signed  veryvp.net;
+# or your changes may be overwritten
+os-email.com                    require_signed  os-email.com;
+os-media.com                    require_signed  os-media.com;
+osv.com                         require_signed  osvparish.ccsend.com;
+ottingergolf.com                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net,scotlandrun.ccsend.com";
+ourrevolution.com               require_signed  ourrevolution.com;
+ourtime.com                     require_signed  ourtime.com;
+outdoorfest.com                 require_signed  outdoorfest.com;
+outfrontmedia.com               require_signed  cbsoa.onmicrosoft.com;
+outsiderclub.com                require_signed  "outsiderclub.com,bluehornet.com";
+outsource.com                   require_signed  outsource.com;
+overstock.com                   require_signed  overstock.com;
+ownerreminders.com              require_signed  ownerreminders.com;
+p66.com                         require_signed  p66.com;
+pac-cap.com                     require_signed  thelakearrowheadvillage.ccsend.com;
+pacific.edu                     require_signed  "imodules.com,bluehornet.com";
+pacmail.em.marketinghq.net      require_signed  pacmail.em.marketinghq.net;
+paintingwithatwist.com          require_signed  paintingwithatwist-com.20150623.gappssmtp.com;
+paintsquare.com                 require_signed  paintsquare.com;
+palazzodelsol.com               require_signed  icontactmail1.com;
+palmislandcaribbean.com         require_signed  zmaildirect.com;
+paloma.washingtonpost.com       require_signed  paloma.washingtonpost.com;
+pandora.com                     signed_white    "pandora.com,sg.pandora.com";   // some unsigned mail directly from pandora mail servers
+paperlesspost.com               require_signed  "paperlesspost.com,*.paperlesspost.com";
+parallels-universe.com          require_signed  parallels-universe.com;
+paramountsign.com               require_signed  "email.shopvox.com,paramountsign-com.20150623.gappssmtp.com"
+parcelpending.com               require_signed  parcelpending.com;
+parkrideflyusa.com              require_signed  "yo155.com,publicaster.com,bsftransmit7.com";
+partsgeek.com                   require_signed  "smtpserver.email,smtpsendmail.com,partsgeek.ccsend.com";
+pastorrick.com                  require_signed  bluehornet.com;
+patientconnect365.com           require_signed  patientconnect365.com;
+patients.pgsurveying.com        require_signed  patients.pgsurveying.com;
+patreasury.gov                  require_signed  patreasury.gov;
+patriotsofamerica.com           require_signed  patriotsofamerica.com;
+patriotvideos.net               require_signed  patriotvideos.net;
+pay.amazon.com                  require_signed  amazon.com;
+paychex.com                     require_signed  paychex.com;
+paypal.com                      require_signed  paypal.com;
+payproglobal.com                require_signed  email.payproglobal.com;
+payrollcentric.com              require_signed  "smtpserver.email,smtpsendmail.com,smtp.com,em.evolutionhcm.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+paytrace.com                    require_signed  paytrace.com;
+peakhourapp.com                 require_signed  "peakhourapp-com.20150623.gappssmtp,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+peavit.com                      require_signed  netorgft2525885.onmicrosoft.com;
+pennfuture.org                  require_signed  salsalabs.org;
+pennsylvanialotteryemail.com    require_signed  pennsylvanialotteryemail.com;
+pennsys.com                     signed_white    quosal.com;                     // some unsigned mail
+penske.com                      require_signed  penske.com;
+perfectpractice.com             require_signed  www-perfectpractice.ccsend.com;
+perkspot.com                    require_signed  perkspot.com;
+perrinconferences.com           require_signed  perrinconferences.ccsend.com;
+petmountain.com                 require_signed  petmountain.com;
+petro-media.com                 require_signed  petro-media.com;
+pfizer.com                      require_signed  "pfizer.com,yrb.onmicrosoft.com";
+pgisports.com                   require_signed  infusionmail.com;
+pharmacy.cvs.com                require_signed  pharmacy.cvs.com;
+phelpsmediagroup.com            require_signed  "phelpsmediagroup.ccsend.com,auth.ccsend.com";
+philadelphiarunner.com          require_signed  philadelphiarunner.ccsend.com;
+phila.gov                       signed_white    "phila.onmicrosoft.com,auth.ccsend.com";    // unsigned via exacttarget not listed in their spf record
+philamuseum.org                 signed_white    "cmail19.com,cmail20.com";      // some unsigned mail via outlook
+phillyleagues.com               require_signed  phillyleagues.ccsend.com;
+phillynewssubscriptionservices.com      require_signed  phillynewssubscriptionservices.com;
+phillypops.org                  require_signed  phillypops.org;
+phillytrib.com                  require_signed  phillytrib.com;
+philorch.org                    require_signed  philorch.org;
+photoemail.walgreens.com        require_signed  photoemail.walgreens.com;
+pianet.org                      require_signed  "moon-ray.com,mmsend.com";
+pimhendriksen.com               require_signed  emlr2.com;
+pinebrookroasters.com           require_signed  netorgft1374413.onmicrosoft.com;
+pipmag.com                      require_signed  pipmag.com;
+plaintiffsolutionscenter.com    require_signed  plaintiffsolutionscenter.ccsend.com;
+plaintiffsolutions.com          require_signed  thelienresolutiongroup.ccsend.com;
+pmc.com                         require_signed  pmc.com;
+pmrgi.com                       require_signed  cvent-planner.com;
+pods.com                        require_signed  pods.com;
+polsinelli.com                  require_signed  polsinelli.com;             // unsigned spam burst joe-job
+pond5.com                       require_signed  e.pond5.com;
+poolhost.com                    require_signed  poolhost.com;
+popmoney.com                    require_signed  popmoney.com;
+popsugar.com                    require_signed  "popsugar.com,auth.ccsend.com";
+postergarden.com                require_signed  postergarden.com;
+powell.com                      require_signed  powell.com;
+ppfa.org                        require_signed  ppfa.org;
+precise-law.com                 require_signed  "preciseinc1.onmicrosoft.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+premierenergygroup.com          require_signed  premierenergygroup.ccsend.com;
+premiergoldupdate.com           require_signed  premiergoldupdate.com;
+premium.shiftdailynews.com      require_signed  premium.shiftdailynews.com;
+premiumstore.com                require_signed  premiumstore.com;
+primalsourcenews.com            require_signed  primalsourcenews.com;
+princetheater.org               signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+printavo.com                    require_signed  printavo.com;
+printmediamn.com                require_signed  northlightcolor.ccsend.com;
+procerahealth.com               require_signed  "procerahealth.com,auth.ccsend.com";
+procureware.com                 require_signed  procureware.com;
+producersesourcenews.com        require_signed  producersesourcenews.com;
+progressiveagent.com            require_signed  b2b-mail.net;
+proofhq.com                     require_signed  proofhq.com;
+protradertoday.com              require_signed  protradertoday.com;
+providesupport.com              require_signed  providesupport.com;
+proxyvote.com                   require_signed  proxyvote.com;
+prucentermail.com               require_signed  prucentermail.com;
+pslgroup.com                    require_signed  pslgroup.com;
+p.spiritairlines.com            require_signed  p.spiritairlines.com;
+pssl.com                        require_signed  pssl.com;
+psu.edu                         require_signed  icontactmail4.com;
+ptcommunity.com                 require_signed  mmmm.ccsend.com;
+ptc.starwoodhotelsemail.com     require_signed  ptc.starwoodhotelsemail.com;
+ptynews.info                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+publicdomainreview.org          require_signed  publicdomainreview.org;
+public.govdelivery.com          require_signed  public.govdelivery.com;
+pub.mediadc.com                 require_signed  pub.mediadc.com;
+pub.zinio.com                   require_signed  pub.zinio.com;
+pumpitupfun.com                 require_signed  email.pumpitupfun.com;
+purewow.com                     require_signed  purewow.com;
+pvpusd.net                      require_signed  pvpusd.onmicrosoft.com;
+qgemail.com                     require_signed  qgemail.com;
+qualityliquorstore.com          require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+qualtrics-research.com          require_signed  qemailserver.com;
+queenmary.com                   require_signed  zmaildirect.com;
+questdiagnostics.com            require_signed  inbound.dcm8.com;
+questexnetwork.com              require_signed  questexnetwork.com;
+quora.com                       require_signed  "quora.com,email.quora.com";
+quotemyumbrella.com             require_signed  icontactmail2.com;
+quotient.com                    signed_white    couponsinc.onmicrosoft.com;     // some unsigned mail via salesforce
+racewire.com                    require_signed  racewire.com;
+radke.co                        require_signed  radke-co.20150623.gappssmtp.com;
+raise3d.freshdesk.com           require_signed  freshdesk.com;
+rallypoint.com                  require_signed  rallypoint.com;
+randjsc.com                     require_signed  randjsc.onmicrosoft.com;
+randpac.com                     require_signed  bluehornet.com;
+rapidnews.com                   require_signed  "rapidnews-com.20150623.gappssmtp.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+ravepro.com                     require_signed  icontactmail1.com;
+rbc.com.pa                      require_signed  "rbc-com-pa.20150623.gappssmtp.com,mpdkim2.ch";
+rcam.target.com                 require_signed  rcam.target.com;
+realage-mail.com                require_signed  realage-mail.com;
+recordreform.com                require_signed  medquest.ccsend.com;
+refinery29.com                  require_signed  "refinery29.com,refinery29-com.20150623.gappssmtp.com";
+regus.com                       require_signed  "regus.com,mandrillapp.com";
+rel1.aeroplan.com               require_signed  rel1.aeroplan.com;
+religioussupply.com             require_signed  religioussupplies.com;
+reminder10.creditkarma.com       require_signed  reminder.creditkarma.com;
+reminder11.creditkarma.com       require_signed  reminder.creditkarma.com;
+reminder5.creditkarma.com       require_signed  reminder.creditkarma.com;
+reminder6.creditkarma.com       require_signed  reminder.creditkarma.com;
+reminder7.creditkarma.com       require_signed  reminder.creditkarma.com;
+reminder8.creditkarma.com       require_signed  reminder.creditkarma.com;
+reminder9.creditkarma.com       require_signed  reminder.creditkarma.com;
+reminder.honda.com              require_signed  reminder.honda.com;
+remindmemd.com                  require_signed  remindmemd.com;
+rentalcars.com                  require_signed  rentalcars.com;
+rentlooker.site                 require_signed  amazonses.com;
+replies.charlestyrwhitt.com     require_signed  replies.charlestyrwhitt.com;
+reply1.ebay.com                 require_signed  reply1.ebay.com;
+reply.broadwaydiscounts.com     require_signed  reply.broadwaydiscounts.com;
+reply.bronto.com                require_signed  bronto.com;
+reply.gopinsiderbrief.com       require_signed  reply.gopinsiderbrief.com;
+reply.harrietcarter.com         require_signed  reply.harrietcarter.com;
+reply.medixselect.com           require_signed  reply.medixselect.com;
+reply.newsmax.com               require_signed  reply.newsmax.com;
+resellerratings.com             require_signed  resellerratings.com;
+reservebar.com                  require_signed  reservebar.com;
+resnexus.com                    require_signed  resnexus.com;
+response.ebags.com              require_signed  response.ebags.com;
+response.nfcu.org               require_signed  response.nfcu.org;
+revinate.com                    require_signed  inguest.com;
+re.walgreens.com                require_signed  re.walgreens.com;
+rewards.shopyourwayrewards.com  require_signed  rewards.shopyourwayrewards.com;
+rewardupdates.wholefoodsmarket.com require_signed  rewardupdates.wholefoodsmarket.com;
+r.groupon.com                   require_signed  r.groupon.com;
+rht.com                         require_signed  roberthalf.onmicrosoft.com;
+richardsolomonreplies.com       require_signed  richardsolomonreplies.com;
+richmondproductions.com         signed_white    richmondproductions-com.20150623.gappssmtp.com; // diane@solvang
+rickwarren.org                  require_signed  bluehornet.com;
+rimage.com                      signed_white    rimagede.onmicrosoft.com;       // broken spf - multiple inconsistent records
+rimsd.k12.ca.us                 require_signed  rimoftheworldu.onmicrosoft.com;
+riogrande.com                   require_signed  riogrande.com;
+riponprinters.com               require_signed  riponprinters.ccsend.com;
+rismedia-enews.com              require_signed  rismedia-enews.com;
+ritz-ritz.us                    require_signed  ritz-ritz.us;
+rlsassociates.com               require_signed  icontactmail3.com;
+robsonforensic.com              signed_white    "*.shared.hubspot.com";         // unsigned mail from their barracuda servers
+roomster.com                    require_signed  roomster.com;
+rosewe.com                      require_signed  rosewe.com;
+roundabouttheatre.org           require_signed  roundabouttheatre.org;
+route.monster.com               require_signed  monster.com;
+rply.b21pubs.com                require_signed  netatlantic.com;
+rrca.org                        require_signed  rrca.ccsend.com;
+rs.email.nextdoor.com           require_signed  email.nextdoor.com;
+rt.email.aa.com                 require_signed  rt.email.aa.com;
+rubinproperties.com             require_signed  rubinproperties-com.20150623.gappssmtp.com;
+ruthschrismail.com              require_signed  ruthschrismail.com;
+rxhealthalerts.com              require_signed  rxhealthalerts.com;
+safehome.adt.com                require_signed  safehome.adt.com;
+salamanderhotels.com            require_signed  salamanderhotels.com;
+salamanderresort.com            require_signed  "salamanderresort.com,salamanderhotels.com";
+samplingsupplies.com            require_signed  samplingsupplies.com;
+sandpiperrental.com             require_signed  sandpiperrental.com;
+santamariasun.com               require_signed  santamariasun-com.20150623.gappssmtp.com;
+sap.com                         signed_white    bluehornet.com;                 // probably other signers
+save.spirit-airlines.com        require_signed  save.spirit-airlines.com;
+sbcsd.org                       require_signed  sbcsd.onmicrosoft.com;
+sbpub.com                       require_signed  "publicaster.com,bsftransmit7.com";
+sbs.nyc.gov                     require_signed  "auth.ccsend.com,nycsbs.ccsend.com";
+schedulepayment.com             require_signed  schedulepayment.com;
+schoox.com                      require_signed  mail.intercom.io;
+scoremorerewards.com            require_signed  scoremorerewards.com;
+scoutbook.com                   require_signed  scoutbook.com;
+scoutmob.com                    require_signed  scoutmob.com;
+sdi.com                         require_signed  sdi2.onmicrosoft.com;
+seatgeek.com                    require_signed  seatgeek.com;
+seatme.com                      require_signed  seatme.com;
+securedata-trans.com            require_signed  mg.securedata-trans.com;
+secure.norton.com               require_signed  secure.norton.com;
+secureserver.net                require_signed  em.secureserver.net;
+sellerlabs.com                  require_signed  "sellerlabs.com,dripemail2.com,pm.mtasv.net";
+send.grammarly.com              require_signed  send.grammarly.com;
+sennheiser.com                  require_signed  sennheiseroffice365.onmicrosoft.com;
+sensorcon.com                   require_signed  sensorcon-com.20150623.gappssmtp.com;
+service.capitalone.com          require_signed  capitalone.com;
+service.checkout.visa.com       require_signed  service.checkout.visa.com;
+service.dealer-enews.com        require_signed  service.dealer-enews.com;
+service.govdelivery.com         require_signed  service.govdelivery.com;
+service.grainger.com            require_signed  service.grainger.com;
+service.shutterstockmail.com    require_signed  shutterstockmail.com;
+services.target.com             require_signed  services.target.com;
+service.stubhub.com             require_signed  service.stubhub.com;
+service.target.com              require_signed  service.target.com;
+servicing.plenti.com            require_signed  servicing.plenti.com;
+servicing.synchronyfinancial.com require_signed servicing.synchronyfinancial.com;
+sesenergy.org                   require_signed  secureenergy.onmicrosoft.com;
+sfbcoffee.com                   require_signed  "sfbcoffee.com,mg.oaklandcoffee.com";   // unsigned junk via listrak fails spf, multiple spf records
+sfcable.com                     require_signed  sfcable.com;
+sf-notifications.com            require_signed  email.sf-notifications.com;
+sft.alerted.org                 require_signed  sft.alerted.org;
+sg.booking.com                  require_signed  "booking.com,sg.booking.com";
+sgia.org                        require_signed  "sgia.org,sp01.hubspotemail.net";
+shadesoflight.com               require_signed  shadesoflight.com;
+shapingahealthylife.com         require_signed  weebly.com;
+shermanstravel.com              require_signed  shermanstravel.com;
+shipstation.com                 require_signed  shipstation.com;
+shipsticks.com                  require_signed  shipsticks.com;
+shop.adorama.com                require_signed  shop.adorama.com;
+shopassociation.org             require_signed  bluehornet.com;
+shopbecker.com                  require_signed  shopbecker.ccsend.com;
+shop.c21stores.com              require_signed  shop.c21stores.com;
+shopcandelabra.com              require_signed  shopcandelabra.ccsend.com;
+shopdeluxe.com                  require_signed  deluxe.onmicrosoft.com;
+shopify.com                     require_signed  "shopify.com,zendesk.com";
+shop.newbalance.com             require_signed  shop.newbalance.com;
+shoppermarketing.ims-stats.com  require_signed  shoppermarketing.ims-stats.com;
+shopping.hammacher.com          require_signed  "shopping.hammacher.com,email.triggermail.io";
+shopping.ibemail.com            require_signed  shopping.ibemail.com;
+shopspring.com                  require_signed  shopspring.com;
+shoptalk.com                    require_signed  shoptalk.com;
+shoptiques.com                  require_signed  shoptiques.com;
+shutterstockmail.com            require_signed  shutterstockmail.com;
+siegelagency.com                require_signed  pptsend03.com;
+signaturehardware.com           require_signed  signaturehardware.com;
+signnow.com                     require_signed  signnow.com;
+signprosystems.com              require_signed  orbus.ccsend.com;
+silentmessages.com              require_signed  icontactmail1.com;
+simon.com                       require_signed  simon.com;
+sircon.com                      require_signed  vertafore.onmicrosoft.com;
+siriusxm.com                    require_signed  siriusradio.onmicrosoft.com;
+sjbde.org                       require_signed  sjbde-org.20150623.gappssmtp.com;
+sjf.com                         require_signed  sjf.ccsend.com;
+skechers-alerts.com             require_signed  skechers-alerts.com;
+skechers.com                    require_signed  bluehornet.com;
+skillsurvey.com                 require_signed  skillsurvey.com;
+skuvault.com                    require_signed  skuvault.com;
+slinfo.pptsend02.com            require_signed  slinfo.pptsend02.com;
+smartpros.com                   require_signed  smartpros.com;
+smart-shopping.thredup.com      require_signed  smart-shopping.thredup.com;
+smathersandbranson.com          require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+smith-wesson.com                require_signed  icontactmail1.com;
+smitv.org                       require_signed  "netorg1915413.onmicrosoft.com,auth.ccsend.com";
+smm.global                      require_signed  smm.global;
+smugmug.com                     require_signed  smugmug.com;
+snapchat.com                    signed_white    snapchat.com;                   // some unsigned mail
+snipp.com                       require_signed  "snipp.com,snippinteractive.onmicrosoft.com";
+snlcenter.com                   require_signed  snlcenter.com;
+snooth.com                      require_signed  mg.snoothmail.com;
+snpictures.com                  require_signed  snpictures-com.20150623.gappssmtp.com;
+socialsecurityworks.org         require_signed  sg.actionnetwork.org;
+socksaddict.com                 require_signed  bronto.com;
+sony.com                        signed_white    sony.onmicrosoft.com;           // some unsigned mail via lightpath
+sos.ca.gov                      require_signed  californiagold.onmicrosoft.com;
+sourcelink.com                  require_signed  sourcelink.com;
+sourceone.nazdar.com            require_signed  reachmail.net;
+sovos.com                       signed_white    sovos.com;                      // some unsigned mail via ms outlook
+specialolympics.org             signed_white    bounce.bluestatedigital.com;
+spglobal.com                    require_signed  spglobal.com;
+spiceworks.com                  require_signed  spiceworks.com;
+splitly.com                     require_signed  splitly.com;
+spotify.com                     require_signed  spotify.com;
+springer.com                    require_signed  springer.com;
+springeronline.com              require_signed  springeronline.com;
+squarespace.com                 require_signed  squarespace.com;
+ssa.gov                         require_signed  ssa.gov;
+ssmhealth.com                   require_signed  ssmhealth.onmicrosoft.com;
+st94.com                        signed_white    st94.ccsend.com;
+stackforpa.com                  require_signed  bounce.bluestatedigital.com;
+standard.com                    require_signed  standard.com;
+standunited.org                 require_signed  "standunited.org,mailings.standunited.org";
+stanford.edu                    require_signed  "stanford.edu,office365stanford.onmicrosoft.com";
+stanfordhealthcare.org          signed_white    sbshare1.wc08.net;              // might have some other signers
+staplesadvantage.com            require_signed  yotpo.com;
+staples.com                     signed_white    "ussicorp5.onmicrosoft.com,mktroute.com";   // some unsigned mail via salesforce
+statefarminfo.com               require_signed  statefarminfo.com;
+state.mn.us                     require_signed  mn365.onmicrosoft.com;
+statnews.com                    require_signed  "statnews.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+steeleassetmanagement.net       require_signed  gmail.com;
+steelforge.com                  require_signed  b2b-mail.net;
+stjstr.org                      require_signed  "stjstr-org.20150623.gappssmtp.com,mystudentsprogress.com";
+store.aabacosmallbusiness.com   require_signed  yahoo.com;
+store.yahoo.com                 require_signed  yahoo.com;
+stringacademyofwisconsin.org    require_signed  panthers.onmicrosoft.com;
+stripe.com                      require_signed  stripe.com;
+strongmail.cfmvmail.com         require_signed  strongmail.cfmvmail.com;
+style.adoreme.com               require_signed  style.adoreme.com;
+style.letote.com                require_signed  style.letote.com;
+subscriptions.gaia.com          require_signed  subscriptions.gaia.com;
+subscriptions.ssa.gov           require_signed  subscriptions.ssa.gov;
+suntrust.com                    require_signed  suntrust.com;
+superbrightleds.com             require_signed  "superbrightleds.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+superflypresents.com            signed_white    superflypresents.com;           // also from mailchimp, not listed in their spf record
+superior-phs.com                require_signed  superior-phs.ccsend.com;
+supermoon.com                   require_signed  supermoonla.onmicrosoft.com;
+support.com                     signed_black    sendgrid.net;                   // apple support scam
+support.facebook.com            require_signed  support.facebook.com;
+support.org                     signed_black    sendgrid.net;                   // apple support scam
+support.yellowstone.org         require_signed  support.yellowstone.org;
+support.zappos.com              require_signed  zappos.com;
+susquis.com                     require_signed  spsend.com;
+sustainablebrands.com           require_signed  sustainablebrands.com;
+svemail.evesaddiction.com       require_signed  svemail.evesaddiction.com;
+svemail.fromyouflowers.com      require_signed  svemail.fromyouflowers.com;
+svemail.sendflowers.com         require_signed  svemail.sendflowers.com;
+sweet.ediblearrangements.com    require_signed  sweet.ediblearrangements.com;
+sweetwater.com                  require_signed  sweetwater.com;
+swimstyle.com                   require_signed  swimstyle.com;
+swmobileservice.com             require_signed  swmobileservice-com.20150623.gappssmtp.com;
+sxsw.com                        require_signed  "sxsw.com,mmxreservations.com";
+symantec.rsys2.com              require_signed  rsys2.com;
+syvchorale.org                  require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+talend.com                      require_signed  talend.com;
+talentsmartnewsletter.com       require_signed  email.talentsmartnewsletter.com;
+target-reporting.net            require_signed  email.broadcastsavings.com;     // dsgcreative
+tasmarketing.com                require_signed  tasmarketing.ccsend.com;
+tastingtable.com                require_signed  tastingtable.com;
+taxformprinter.com              require_signed  taxformprinter.com;
+team2.targetmarketingmag.com    require_signed  team2.targetmarketingmag.com;
+teamwork.com                    require_signed  teamwork.com;
+team.wrike.com                  require_signed  "wrike.com,mktomail.com";
+teapartybulletin.com            require_signed  teapartybulletin.com;
+teapartypolitics.com            require_signed  teapartypolitics.com;
+techforless-alerts.com          require_signed  techforless-alerts.com;
+telescopecasual.com             require_signed  telescope.onmicrosoft.com;
+tennettmfg.com                  require_signed  tennettmfg.com;
+tenthousandvillages.com         require_signed  tenthousandvillages.com;
+terumomedical.com               require_signed  terumoamericas.onmicrosoft.com;
+textnow.me                      require_signed  textnow.me;
+thankyou.citibank.com           require_signed  thankyou.citibank.com;
+thankyouemails.org              require_signed  thankyouemails.org;
+theatre.info.cinemark.com       require_signed  theatre.info.cinemark.com;
+thechivery.com                  require_signed  thechivery.com;
+the-efa.org                     require_signed  "the-efa.org,the-efa.ccsend.com";
+thefisherman.com                require_signed  thefisherman.ccsend.com;
+thegovconadvisors.com           require_signed  reachmail.net;
+thehotviolinist.com             require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+thejurylab.com                  require_signed  icontactmail1.com;
+thelooploft.com                 require_signed  thelooploft.com;
+themagnetgroup.com              require_signed  themagnetgroup.com;
+themichigancatholicchoir.org    require_signed  papadantravel.com;
+theproducenews.com              require_signed  theproducenews.ccsend.com;
+therdstore.com                  require_signed  jetrord.ccsend.com;
+theselfimprovementgenie.com     require_signed  theselfimprovementgenie.com;
+theshadestore.com               require_signed  theshadestore.com;
+thesoccerwire.com               require_signed  hummersport.ccsend.com;
+thesymphony.org                 require_signed  thesymphony.org;
+thetrustadvisor.com             require_signed  thetrustadvisor.com;
+theupsstore.com                 require_signed  "theupsstore.com,tupssfran.onmicrosoft.com,mailgun.signpost.com";
+thewarmingstore.com             require_signed  icontactmail1.com;
+thinoptics.com                  require_signed  "groupvine.com,bronto.com";
+thirdlove.com                   require_signed  thirdlove.com;
+# this file is maintained by carl@five-ten-sg.com - don't edit locally
+thomasnet.com                   require_signed  thomasnet.com;
+thorntontomasetti.com           require_signed  thorntontomasetti.onmicrosoft.com;  // other spam signed by mailchimp
+thrivemarket.com                require_signed  thrivemarket.com;
+ticketfly.com                   require_signed  ticketfly.com;
+ticketleap.com                  require_signed  "ticketleap.com,amazonses.com";
+tidio.net                       require_signed  tidio.net;
+tieivote.com                    require_signed  smtpserver.email;
+t.kohls.com                     require_signed  t.kohls.com;
+tm.vistaprint.com               require_signed  tm.vistaprint.com;
+tomarind.com                    require_signed  "netorgft1471273.onmicrosoft.com,tomarind.ccsend.com";
+tomudall.com                    signed_white    bounce.bluestatedigital.com;
+toomeyforsenate.com             require_signed  toomeyforsenate.com;
+toomey.senate.gov               require_signed  senate.gov;
+touchstonehomeproducts.com      signed_white    "yahoo.com,auth.ccsend.com";
+tower90230.com                  require_signed  tower90230.onmicrosoft.com;
+townhallmail.com                require_signed  townhallmail.com;
+traillink.com                   require_signed  traillink.com;
+training.compliancekey.net      require_signed  training.compliancekey.net;
+trainingmag.com                 require_signed  "*.n-email5.net,*.n-email.net"
+# transactional mail and mailing lists
+trans.duluthtradingemail.com    require_signed  trans.duluthtradingemail.com;
+transferwise.com                require_signed  transferwise.com;
+traveloni.com                   require_signed  traveloni.ccsend.com;
+travismanion.org                require_signed  omktmail2.com;
+trello.com                      require_signed  trello.com;
+trendhunter.com                 require_signed  trendhunter.ccsend.com;
+trendmicro.com                  require_signed  trendmicro.com;
+tridentadvisors.com             signed_white    tridentadvisors.onmicrosoft.com;// some mail has bad signature
+tridentmortgage.com             require_signed  tridentmortgage.com;
+trigentsolutions.com            require_signed  trigentsolutionsinc.onmicrosoft.com;
+ttmail.timetrade.com            require_signed  timetrade.com;
+tuhs.temple.edu                 require_signed  tuhs.onmicrosoft.com;
+turnoutpac.org                  signed_white    bounce.bluestatedigital.com;
+t.wilsonsleather.com            require_signed  t.wilsonsleather.com;
+twitter.com                     require_signed  twitter.com;
+tx.redbox.com                   require_signed  tx.redbox.com;
+tycoint.com                     require_signed  tycointernational.onmicrosoft.com;
+uber.com                        signed_white    "uber.com,sptrans.uber.com,spmail.uber.com";    // unsigned mail from sptrans.uber.com that fails spf
+uberconference.com              require_signed  uberconference.com;
+ubmcanon-info.com               require_signed  ubmcanon-info.com;
+ubs.com                         require_signed  ubs.com;
+ucla.edu                        signed_white    ucla-edu.20150623.gappssmtp.com;    // probably not the only source
+ucsb.edu                        require_signed  "ltsc.ucsb.edu,imodules.com";
+ulta.com                        require_signed  ulta.com;
+ultimateestateplanner.com       require_signed  ultimateestateplanner.ccsend.com;
+umail.ucsb.edu                  require_signed  "ltsc.ucsb.edu,gmail.com";      // google groups mail for michael signed by gmail
+uncubed.com                     require_signed  uncubed.com;
+undertone.com                   signed_white    undertone.com;                  // mbmg client
+unionbank.com                   require_signed  unionbank.com;
+unionhomemortgage.com           require_signed  eeoo.co;
+unionleague.org                 signed_white    "unionleague.org,unionleague.ccsend.com";   // some unsigned mail via ppe-hosted.com, wrong spf record, include: vs a:dispatch-us.ppe-hosted.com
+unitedyacht.com                 require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+unitronics.com                  require_signed  unitronics.ccsend.com;
+universalsocceracademy.com      require_signed  universalsocceracademy.ccsend.com;
+universityproducts.com          signed_white    icontactmail3.com;              // unsigned mail from their own servers, no spf txt record
+unm.edu                         require_signed  unmm.onmicrosoft.com;
+update.santanderbank.com        require_signed  update.santanderbank.com;
+updates.conservativeintel.com   require_signed  updates.conservativeintel.com;
+updates.hayneedle.com           require_signed  updates.hayneedle.com;
+updates.ticketnetworkdirect.com require_signed  updates.ticketnetworkdirect.com;
+uphs.upenn.edu                  signed_white    cvent-planner.com;              // some unsigned mail via en25
+uprinting.com                   require_signed  uprinting.com;
+ups.com                         require_signed  ups.com;
+upsilonventures.com             require_signed  upsilonllc.onmicrosoft.com;
+urthave.com                     require_signed  urthave.com;
+usa.constitutionalrightspac.com require_signed  usa.constitutionalrightspac.com;
+usbank.com                      require_signed  usbank.com;
+usgamail.org                    require_signed  usgamail.org;
+usnews-b2b.com                  require_signed  usnews-b2b.com;
+usnotaries.com                  require_signed  usnotaries.ccsend.com;
+us.panasonic.com                signed_white    "us.panasonic.com,pcus1.onmicrosoft.com";   // some broken signatures from microsoft
+usrisk.com                      require_signed  dmpemail1.com;
+us-takeoff.com                  require_signed  us-takeoff-com.20150623.gappssmtp.com;
+u.ticketliquidatorupdates.com   require_signed  u.ticketliquidatorupdates.com;
+uwalumni.com                    require_signed  uwalumni.com;
+valarkoosh.com                  require_signed  bounce.myngp.com;
+valeant.com                     require_signed  "valeant.com,valeant.onmicrosoft.com";
+value.amerimark.com             require_signed  value.amerimark.com;
+value.kmart.com                 require_signed  value.kmart.com;
+value.sears.com                 require_signed  value.sears.com;
+vanguardcharitable.org          require_signed  cvent-planner.com;
+venmo.com                       require_signed  venmo.com;
+verifone.com                    require_signed  "verifone.com,verifone365.onmicrosoft.com";
+veritivcorp.com                 signed_white    veritivcorp.onmicrosoft.com;    // unsigned via apexanalytix.com that fails spf
+verizon.com                     require_signed  verizon.com;
+verizonenterprise.com           require_signed  verizonenterprise.com;
+verizonwireless.com             require_signed  verizonwireless.com;
+viewpoint.com                   require_signed  "viewpoint.com,coaxis.onmicrosoft.com,cvent-planner.com";
+vignetteslearning.com           require_signed  simplifiedelearning.ccsend.com;
+virtualeventbags.com            require_signed  email.virtualeventbags.com;
+visitpartnerhub.com             require_signed  visitpartnerhub.com;
+visitwynn.com                   require_signed  visitwynn.com;
+visstun-digispec.com            require_signed  "smtpserver.email,smtpsendmail.com";
+vitaminmom.com                  require_signed  vitaminmom-com.20150623.gappssmtp.com;
+vivial.net                      require_signed  "vivial.net,email.nearsay.com";
+vlmservice.com                  signed_white    smtpserver.email;               // some unsigned mail via exacttarget
+vlmservice.zendesk.com          require_signed  "zendesk.com,*.zendesk.com"
+vmg-dma.com                     require_signed  hb236.emailos.com;
+vmware.com                      require_signed  onevmw.onmicrosoft.com;
+voiceoverxtra.com               require_signed  "voiceoverxtra.ccsend.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+vote-now.com                    require_signed  vote-now.com;
+vt.edu                          signed_white    bsf01.com;                      // probably other sources also
+wanjugo.com                     require_signed  wanjugo.com;
+warriorcustomgolf.com           require_signed  warriorcustomgolf.com;
+washingtonpost.com              require_signed  washingtonpost.com;
+watchdog.net                    require_signed  sg.actionnetwork.org;
+watchmanmonitoring.com          require_signed  watchmanmonitoring.com;
+wayfair.com                     require_signed  "wayfair.com,wayfair.onmicrosoft.com";
+wdsearch.com                    require_signed  wdsearch.com;
+wealthyretirement.com           require_signed  wealthyretirement.com;
+wearecollide.com                require_signed  "wearecollide-com.20150623.gappssmtp.com,mlsend3.com";
+weareultraviolet.org            require_signed  "weareultraviolet.org,list.weareultraviolet.org";
+weather.com                     require_signed  weather.com;
+webervations.com                require_signed  webervations.com;
+webinar.compliancekey.net       require_signed  webinar.compliancekey.net;
+webopenings.com                 require_signed  webopenings.com;
+webstaurantstore.com            require_signed  webstaurantstore.com;
+weekly-bulletin.com             require_signed  weekly-bulletin.com;
+weilercorpemail.com             require_signed  weilercorpemail.com;
+weinsteinconstruction.com       require_signed  weinsteinconstruction.com;
+welcome.aexp.com                require_signed  welcome.aexp.com;
+wellsfargo.com                  require_signed  wellsfargo.com;
+wesendit.com                    require_signed  wesendit.com;
+westgermanbmw.com               signed_white    "westgermanbmw.com,xtime.com";  // some unsigned mail via media-mastermind
+westrock.com                    signed_white    westrockco.onmicrosoft.com;     // some unsigned mail via outlook
+weta.org                        require_signed  server8839.e-activist.com;
+wetransfer.com                  require_signed  email.wetransfer.com;
+wharton.upenn.edu               require_signed  "wharton.upenn.edu,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+whcandy.com                     require_signed  whcandy.com;
+whitegraphics.com               require_signed  whitegraphics-com.20150623.gappssmtp.com;
+wholesaleprime.com              require_signed  "sendgrid.net,frg.im";
+williampenninn.com              require_signed  williampenninn.ccsend.com;
+wineawesomeness.com             require_signed  wineawesomeness.com;
+winmo.com                       signed_white    "winmo.com,winmo-com.20150623.gappssmtp.com";   // missing winmo.com key in dns
+winzip.com                      require_signed  winzip.com;
+wisecompanyus.com               require_signed  "wisecompanyus.com,wisecompanyus.onmicrosoft.com";
+wisniewskifornj.com             signed_white    bounce.bluestatedigital.com;
+wixshoutout.com                 require_signed  wixshoutout.com;
+wmtsub.com                      require_signed  wmtsub.com;
+wolfforpa.com                   signed_white    bounce.bluestatedigital.com;
+wolfgordon.com                  require_signed  "wolfgordon.com,b2b-mail.net";
+womenshealthydiets.com          require_signed  womenshealthydiets.com;
+woodturner.org                  require_signed  aawwoodturner.ccsend.com;
+woodworkingshop.com             require_signed  emailwoodworkingshop.com;
+woof.barkshop.com               require_signed  woof.barkshop.com;
+woof.chewy.com                  require_signed  woof.chewy.com;
+woolrich.com                    require_signed  woolrich.com;
+worldsciencefestival.com        require_signed  worldsciencefestival.com;
+wrigley.com                     require_signed  wrigley.com;
+wstelecomlaw.com                require_signed  sapronov.onmicrosoft.com;
+wtcphila.org                    require_signed  "wtcphila.onmicrosoft.com,wtcphila.ccsend.com";
+wyattresearchnewsletters.com    require_signed  wyattresearchnewsletters.com;
+x2vol.com                       require_signed  sendgrid.info;
+xarisma.com                     signed_white    xarisma.com;                    // some unsigned mail via netsuite.com
+xbyte.com                       require_signed  xbyte.com;
+xlive.tm00.com                  require_signed  tm00.com;
+xode.com                        require_signed  xode.com;
+yahoo-inc.com                   require_signed  yahoo-inc.com;                  // password resets, etc
+yellowstone.org                 require_signed  mta-bbcspool.convio.net;
+yelp.com                        signed_white    yelp.com;                       // some unsigned mail from their own servers
+yipit.com                       require_signed  yipit.com;
+y.mileskimball.com              require_signed  y.mileskimball.com;
+youcaring.com                   require_signed  youcaring.com;
+youniqueproducts.com            require_signed  youniqueproducts.com;
+youraccount.readyrefresh.com    require_signed  youraccount.readyrefresh.com;
+yourdcdchocolatier.com          require_signed  yourdcdchocolatier.com;
+yourmembership.com              signed_white    yourmembership.com;             // some unsigned mail from their own servers
+yourpotlaw.com                  require_signed  yourpotlaw.com;
+yourstorewizards.com            require_signed  "yahoo.com,freshdesk.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+youtube.com                     require_signed  youtube.com;
+yummielife.com                  require_signed  yummielife.com;
+zapier.com                      require_signed  zapier.com;
+zappos.com                      require_signed  zappos.com;
+zenfoliomail.com                require_signed  zenfoliomail.com;
+ziprecruiter.com                require_signed  "ziprecruiter.com,sendgrid.me,sendgrid.ziprecruiter.com";
+zixmessagecenter.com            require_signed  zixmessagecenter.com;
+zomato.com                      require_signed  zomato.com;
+zoom.us                         require_signed  zoom.us;
+zorpia.com                      require_signed  zorpia.com;
+zywave.com                      require_signed  zywave.com;
--- a/xml/dnsbl.in	Fri Aug 18 09:11:35 2017 -0700
+++ b/xml/dnsbl.in	Fri Aug 18 09:39:31 2017 -0700
@@ -25,7 +25,7 @@
 
     <refentry id="@PACKAGE@.1">
         <refentryinfo>
-            <date>2017-03-30</date>
+            <date>2017-08-18</date>
             <author>
                 <firstname>Carl</firstname>
                 <surname>Byington</surname>
@@ -545,7 +545,7 @@
                 identical to a DMARC reject policy with strict identifier alignment.
                 When doing SPF fallback, DMARC checks SPF based on the rfc5321
                 envelope from domain. DNSBL checks SPF based on the rfc5322 header
-                from domain, but we ignore mx: and ptr: elements in the txt record.
+                from domain.
                 DMARC does not allow mail from good.example.com to be
                 signed by trusted.example.net - which is a common case. Both Microsoft
                 Office365 and Google run mail for customer domains, but use DKIM
@@ -773,7 +773,7 @@
 
     <refentry id="@PACKAGE@.conf.5">
         <refentryinfo>
-            <date>2017-03-30</date>
+            <date>2017-08-18</date>
             <author>
                 <firstname>Carl</firstname>
                 <surname>Byington</surname>