# SpamBouncer Legitimate Bulk Email Whitelists
#

LOCALTAG=no

# Abuse.net lists
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^208\.31\.42\.[0-9][0-9]?[0-9]?$
* ^Sender: owner-[0-9a-z][-_0-9a-z]+@lists\.abuse\.net([^a-z0-9.]|\. |\.$|$))
* ^List-ID: <[0-9a-z][-_0-9a-z]+\.abuse\.net>$
{ LOCALTAG=yes }


# Apache lists
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^209\.237\.227\.199$
* ^List-Id:.*<([0-9a-z][-_0-9a-z]*\.)+apache\.org>$
{ LOCALTAG=yes }


# Apple Customer Support Mailing Lists
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^17\.254\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?$
* ^Sender: [0-9a-z][-_0-9a-z]+@lists\.apple\.com([^0-9\.]|$)
{ LOCALTAG=yes }


# Constant Comment COI only lists.
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^64\.95\.77\.16[2-46-8]$
{ LOCALTAG=yes }


# Google Customer Support Mailing Lists
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^66\.249\.82\.205$
* FROMEMAIL ?? ^talk-feedback@google\.com$
* ^X-SenderIP: 66\.249\.82\.205$
{ LOCALTAG=yes }


# GRC.com (Steve Gibson)
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^207\.71\.92\.193$
* ^Sender: mailbot-[0-9a-z]+@grc\.com([^0-9\.]|$)
{ LOCALTAG=yes }


# ISIPP lists
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^64\.142\.124\.66$
* ^List-Id:.*<([0-9a-z][-_0-9a-z]*\.)+isipp\.com>$
{ LOCALTAG=yes }


# Join4Free
#
#  Bulk mailing list hoster, has Ereshkigal (Afterburner's former assistant
#  from Erols/RCN) working as an abuse admin there.  As Ereshkigal tells
#  me that lists are confirmed opt-in and clean, I'm whitelisting them.
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^67\.30\.134\.[0-9][0-9]?[0-9]?$
{ LOCALTAG=yes }


# JUSTTHE.NET lists
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^64\.192\.18[6-7]\.[0-9][0-9]?[0-9]?$
* ^List-Id:.*<([0-9a-z][-_0-9a-z]*\.)+lists\.JustThe\.net>$
{ LOCALTAG=yes }


# LinuxBox
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^24\.155\.83\.21$
* ^List-Id: [0-9a-z][-_0-9a-z]+\.linuxbox\.org$
{ LOCALTAG=yes }


# ListBox
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^207\.8\.214\.[4-6]$
* ^List-Software: listbox\.com([^0-9\.]|$)
{ LOCALTAG=yes }


# Lockergnome Mailing List
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^63\.214\.0\.205$
* FROMEMAIL ?? ^list_admin@lockergnome\.com$
{ LOCALTAG=yes }


# LSoft Mailing Lists
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^209\.119\.0\.[0-9][0-9]?[0-9]?$
* ^Sender:.*<[0-9a-z][-_0-9a-z]+@([0-9a-z][-_0-9a-z]*\.)+lsoft\.com>([^0-9\.]|$)
* ^Precedence: list$
{ LOCALTAG=yes }


# Lyris Listserver lists
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^66\.160\.177\.29$
* ^From:.*[^0-9a-z]lyris@lyris\.net([^0-9\.]|$)
{ LOCALTAG=yes }


# MADDOC lists
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^64\.21\.208\.216$
* ^List-Id: ([0-9a-z][-_0-9a-z]+\.)+maddoc\.net$
{ LOCALTAG=yes }


# MiPassoc lists
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^208\.184\.79\.137$
* ^List-Id:.*[^0-9a-z]([0-9a-z][-_0-9a-z]*\.)+(mipassoc\.org|songbird\.com)[>]?$
{ LOCALTAG=yes }


# Open Office Lists
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^64\.125\.133\.202$
* TOEMAIL ?? ^(announce|dev)@openoffice\.org$
{ LOCALTAG=yes }


# Procmail Mailing List
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^134\.130\.[0-9]\.[0-9][0-9]?[0-9]?$
* ^Sender: procmail-bounces@lists\.RWTH-Aachen\.DE([^0-9\.]|$)
* ^To: procmail@lists\.RWTH-Aachen\.DE([^0-9\.]|$)
{ LOCALTAG=yes }


# sf-bay.org Mailing Lists
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^(192\.83\.249\.28|\
                 204\.74\.68\.55|\
                 206\.55\.70\.42)$
* ^List-Id: .*<[0-9a-z][-_0-9a-z]+\.list-id\.sf-bay\.org>$
{ LOCALTAG=yes }


# SFFnet Automailer
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^208\.14\.20[8-9]\.[0-9][0-9]?[0-9]?$
* ^X-Mailer: SFF Net Automailer
* ^(From|Received|Sender).*[^0-9a-z](greyware\.com([^a-z0-9.]|\. |\.$|$)|\
                       sff\.net([^a-z0-9.]|\. |\.$|$))
{ LOCALTAG=yes }


# Sophos Virus Notification list
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^(194\.203\.134\.12[8-9]|\
                  194\.203\.134\.1[3-9][0-9]|\
                  194\.203\.134\.2[0-4][0-9]|\
                  194\.203\.134\.25[0-5]|\
                  213\.86\.172\.12[8-9]|\
                  213\.86\.172\.1[3-5][0-9])$
* ^From: .*[^0-9a-z]notification-return@lists\.sophos\.com([^a-z0-9.]|\. |\.$|$)
{ LOCALTAG=yes }


# Sourceforge Mailing Lists
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^194\.203\.134\.[0-9][0-9]?[0-9]?$
* ^From: .*[^0-9a-z][0-9a-z][-_0-9a-z.]+@newsletters\.osdn\.com([^0-9\.]|$)
{ LOCALTAG=yes }


# SparkList Lists (known COI only)
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ^64\.62\.197\.[0-9][0-9]?[0-9]?$
* ^List-Unsubscribe: <mailto:leave-leveragepoints_html-[0-9a-z]+@laser\.sparklist\.com>([^a-z0-9.]|\. |\.$|$)
* ^X-Mailer: Lyris ListManager Web Interface$
{ LOCALTAG=yes }


# SURBL lists
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^81\.23\.230\.[0-9][0-9]?[0-9]?$
* ^List-Id: .*<[0-9a-z][-_0-9a-z]+\.lists\.surbl\.org>$
{ LOCALTAG=yes }


# What Counts Lists (known COI only)
#
#   At the moment, only LockerGnome is listed here.  What Counts has
#   a bad case of opt-out-itis <wry grin>, but they do host some
#   legitimate and properly managed email lists.  Those that are COI
#   and that I find out about are listed here.
#
:0
* LOCALTAG ?? ^no$
* FIRSTEXIP ?? ^(63\.214\.0\.1[6-9][0-9]|\
                 63\.214\.0\.2[0-1][0-9]|\
                 63\.214\.0\.22[0-3])$
* ^From:.*[^0-9a-z]list_admin@lockergnome\.com([^a-z0-9.]|$)
* ^Reply-To:.*[^0-9a-z]response\whatcounts\.com([^a-z0-9.]|$)
{ LOCALTAG=yes }


# Yahoogroups Lists (Known COI)
#
:0
* LOCALTAG ?? ^no$
* ^X-Yahoo-Newman-Property: groups-email$
* ^(Mailing-List: list|From:) [^0-9a-z](2300ad|\
                                2300noncanon|\
                                ex-cult-support|\
                                icoc_concerned|\
                                icoc_exmembers|\
                                modelbuildingseminar|\
                                orthodox-convert|\
                                outback)(-owner)?@yahoogroups\.com([^a-z0-9.]|$)
{
 LOCALIPREGEXP=${FIRSTEXIPREGEXP}
 LT2=no
 TESTCIDR=${SBDIR}/info/yahoo-ips.cidr
 INCLUDERC=${SBDIR}/functions/check-cidr.rc

 :0
 * LT2 ?? ^yes$
 { LOCALTAG=yes }
}


:0
* LOCALTAG ?? ^yes$
{
 SBLOG="A1R-SpamBouncer Legitimate Bulk Email Whitelist"
 INCLUDERC=${SBDIR}/functions/loglevel.rc

 :0
 { WHITELIST=yes }

 :0
 { BULKTAG=yes }
}