1# SpamBouncer Legitimate Bulk Email Whitelists 2# 3 4LOCALTAG=no 5 6# Abuse.net lists 7# 8:0 9* LOCALTAG ?? ^no$ 10* FIRSTEXIP ?? ^208\.31\.42\.[0-9][0-9]?[0-9]?$ 11* ^Sender: owner-[0-9a-z][-_0-9a-z]+@lists\.abuse\.net([^a-z0-9.]|\. |\.$|$)) 12* ^List-ID: <[0-9a-z][-_0-9a-z]+\.abuse\.net>$ 13{ LOCALTAG=yes } 14 15 16# Apache lists 17# 18:0 19* LOCALTAG ?? ^no$ 20* FIRSTEXIP ?? ^209\.237\.227\.199$ 21* ^List-Id:.*<([0-9a-z][-_0-9a-z]*\.)+apache\.org>$ 22{ LOCALTAG=yes } 23 24 25# Apple Customer Support Mailing Lists 26# 27:0 28* LOCALTAG ?? ^no$ 29* FIRSTEXIP ?? ^17\.254\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?$ 30* ^Sender: [0-9a-z][-_0-9a-z]+@lists\.apple\.com([^0-9\.]|$) 31{ LOCALTAG=yes } 32 33 34# Constant Comment COI only lists. 35# 36:0 37* LOCALTAG ?? ^no$ 38* FIRSTEXIP ?? ^64\.95\.77\.16[2-46-8]$ 39{ LOCALTAG=yes } 40 41 42# Google Customer Support Mailing Lists 43# 44:0 45* LOCALTAG ?? ^no$ 46* FIRSTEXIP ?? ^66\.249\.82\.205$ 47* FROMEMAIL ?? ^talk-feedback@google\.com$ 48* ^X-SenderIP: 66\.249\.82\.205$ 49{ LOCALTAG=yes } 50 51 52# GRC.com (Steve Gibson) 53# 54:0 55* LOCALTAG ?? ^no$ 56* FIRSTEXIP ?? ^207\.71\.92\.193$ 57* ^Sender: mailbot-[0-9a-z]+@grc\.com([^0-9\.]|$) 58{ LOCALTAG=yes } 59 60 61# ISIPP lists 62# 63:0 64* LOCALTAG ?? ^no$ 65* FIRSTEXIP ?? ^64\.142\.124\.66$ 66* ^List-Id:.*<([0-9a-z][-_0-9a-z]*\.)+isipp\.com>$ 67{ LOCALTAG=yes } 68 69 70# Join4Free 71# 72# Bulk mailing list hoster, has Ereshkigal (Afterburner's former assistant 73# from Erols/RCN) working as an abuse admin there. As Ereshkigal tells 74# me that lists are confirmed opt-in and clean, I'm whitelisting them. 75# 76:0 77* LOCALTAG ?? ^no$ 78* FIRSTEXIP ?? ^67\.30\.134\.[0-9][0-9]?[0-9]?$ 79{ LOCALTAG=yes } 80 81 82# JUSTTHE.NET lists 83# 84:0 85* LOCALTAG ?? ^no$ 86* FIRSTEXIP ?? ^64\.192\.18[6-7]\.[0-9][0-9]?[0-9]?$ 87* ^List-Id:.*<([0-9a-z][-_0-9a-z]*\.)+lists\.JustThe\.net>$ 88{ LOCALTAG=yes } 89 90 91# LinuxBox 92# 93:0 94* LOCALTAG ?? ^no$ 95* FIRSTEXIP ?? ^24\.155\.83\.21$ 96* ^List-Id: [0-9a-z][-_0-9a-z]+\.linuxbox\.org$ 97{ LOCALTAG=yes } 98 99 100# ListBox 101# 102:0 103* LOCALTAG ?? ^no$ 104* FIRSTEXIP ?? ^207\.8\.214\.[4-6]$ 105* ^List-Software: listbox\.com([^0-9\.]|$) 106{ LOCALTAG=yes } 107 108 109# Lockergnome Mailing List 110# 111:0 112* LOCALTAG ?? ^no$ 113* FIRSTEXIP ?? ^63\.214\.0\.205$ 114* FROMEMAIL ?? ^list_admin@lockergnome\.com$ 115{ LOCALTAG=yes } 116 117 118# LSoft Mailing Lists 119# 120:0 121* LOCALTAG ?? ^no$ 122* FIRSTEXIP ?? ^209\.119\.0\.[0-9][0-9]?[0-9]?$ 123* ^Sender:.*<[0-9a-z][-_0-9a-z]+@([0-9a-z][-_0-9a-z]*\.)+lsoft\.com>([^0-9\.]|$) 124* ^Precedence: list$ 125{ LOCALTAG=yes } 126 127 128# Lyris Listserver lists 129# 130:0 131* LOCALTAG ?? ^no$ 132* FIRSTEXIP ?? ^66\.160\.177\.29$ 133* ^From:.*[^0-9a-z]lyris@lyris\.net([^0-9\.]|$) 134{ LOCALTAG=yes } 135 136 137# MADDOC lists 138# 139:0 140* LOCALTAG ?? ^no$ 141* FIRSTEXIP ?? ^64\.21\.208\.216$ 142* ^List-Id: ([0-9a-z][-_0-9a-z]+\.)+maddoc\.net$ 143{ LOCALTAG=yes } 144 145 146# MiPassoc lists 147# 148:0 149* LOCALTAG ?? ^no$ 150* FIRSTEXIP ?? ^208\.184\.79\.137$ 151* ^List-Id:.*[^0-9a-z]([0-9a-z][-_0-9a-z]*\.)+(mipassoc\.org|songbird\.com)[>]?$ 152{ LOCALTAG=yes } 153 154 155# Open Office Lists 156# 157:0 158* LOCALTAG ?? ^no$ 159* FIRSTEXIP ?? ^64\.125\.133\.202$ 160* TOEMAIL ?? ^(announce|dev)@openoffice\.org$ 161{ LOCALTAG=yes } 162 163 164# Procmail Mailing List 165# 166:0 167* LOCALTAG ?? ^no$ 168* FIRSTEXIP ?? ^134\.130\.[0-9]\.[0-9][0-9]?[0-9]?$ 169* ^Sender: procmail-bounces@lists\.RWTH-Aachen\.DE([^0-9\.]|$) 170* ^To: procmail@lists\.RWTH-Aachen\.DE([^0-9\.]|$) 171{ LOCALTAG=yes } 172 173 174# sf-bay.org Mailing Lists 175# 176:0 177* LOCALTAG ?? ^no$ 178* FIRSTEXIP ?? ^(192\.83\.249\.28|\ 179 204\.74\.68\.55|\ 180 206\.55\.70\.42)$ 181* ^List-Id: .*<[0-9a-z][-_0-9a-z]+\.list-id\.sf-bay\.org>$ 182{ LOCALTAG=yes } 183 184 185# SFFnet Automailer 186:0 187* LOCALTAG ?? ^no$ 188* FIRSTEXIP ?? ^208\.14\.20[8-9]\.[0-9][0-9]?[0-9]?$ 189* ^X-Mailer: SFF Net Automailer 190* ^(From|Received|Sender).*[^0-9a-z](greyware\.com([^a-z0-9.]|\. |\.$|$)|\ 191 sff\.net([^a-z0-9.]|\. |\.$|$)) 192{ LOCALTAG=yes } 193 194 195# Sophos Virus Notification list 196:0 197* LOCALTAG ?? ^no$ 198* FIRSTEXIP ?? ^(194\.203\.134\.12[8-9]|\ 199 194\.203\.134\.1[3-9][0-9]|\ 200 194\.203\.134\.2[0-4][0-9]|\ 201 194\.203\.134\.25[0-5]|\ 202 213\.86\.172\.12[8-9]|\ 203 213\.86\.172\.1[3-5][0-9])$ 204* ^From: .*[^0-9a-z]notification-return@lists\.sophos\.com([^a-z0-9.]|\. |\.$|$) 205{ LOCALTAG=yes } 206 207 208# Sourceforge Mailing Lists 209# 210:0 211* LOCALTAG ?? ^no$ 212* FIRSTEXIP ?? ^194\.203\.134\.[0-9][0-9]?[0-9]?$ 213* ^From: .*[^0-9a-z][0-9a-z][-_0-9a-z.]+@newsletters\.osdn\.com([^0-9\.]|$) 214{ LOCALTAG=yes } 215 216 217# SparkList Lists (known COI only) 218# 219:0 220* LOCALTAG ?? ^no$ 221* FIRSTEXIP ^64\.62\.197\.[0-9][0-9]?[0-9]?$ 222* ^List-Unsubscribe: <mailto:leave-leveragepoints_html-[0-9a-z]+@laser\.sparklist\.com>([^a-z0-9.]|\. |\.$|$) 223* ^X-Mailer: Lyris ListManager Web Interface$ 224{ LOCALTAG=yes } 225 226 227# SURBL lists 228# 229:0 230* LOCALTAG ?? ^no$ 231* FIRSTEXIP ?? ^81\.23\.230\.[0-9][0-9]?[0-9]?$ 232* ^List-Id: .*<[0-9a-z][-_0-9a-z]+\.lists\.surbl\.org>$ 233{ LOCALTAG=yes } 234 235 236# What Counts Lists (known COI only) 237# 238# At the moment, only LockerGnome is listed here. What Counts has 239# a bad case of opt-out-itis <wry grin>, but they do host some 240# legitimate and properly managed email lists. Those that are COI 241# and that I find out about are listed here. 242# 243:0 244* LOCALTAG ?? ^no$ 245* FIRSTEXIP ?? ^(63\.214\.0\.1[6-9][0-9]|\ 246 63\.214\.0\.2[0-1][0-9]|\ 247 63\.214\.0\.22[0-3])$ 248* ^From:.*[^0-9a-z]list_admin@lockergnome\.com([^a-z0-9.]|$) 249* ^Reply-To:.*[^0-9a-z]response\whatcounts\.com([^a-z0-9.]|$) 250{ LOCALTAG=yes } 251 252 253# Yahoogroups Lists (Known COI) 254# 255:0 256* LOCALTAG ?? ^no$ 257* ^X-Yahoo-Newman-Property: groups-email$ 258* ^(Mailing-List: list|From:) [^0-9a-z](2300ad|\ 259 2300noncanon|\ 260 ex-cult-support|\ 261 icoc_concerned|\ 262 icoc_exmembers|\ 263 modelbuildingseminar|\ 264 orthodox-convert|\ 265 outback)(-owner)?@yahoogroups\.com([^a-z0-9.]|$) 266{ 267 LOCALIPREGEXP=${FIRSTEXIPREGEXP} 268 LT2=no 269 TESTCIDR=${SBDIR}/info/yahoo-ips.cidr 270 INCLUDERC=${SBDIR}/functions/check-cidr.rc 271 272 :0 273 * LT2 ?? ^yes$ 274 { LOCALTAG=yes } 275} 276 277 278:0 279* LOCALTAG ?? ^yes$ 280{ 281 SBLOG="A1R-SpamBouncer Legitimate Bulk Email Whitelist" 282 INCLUDERC=${SBDIR}/functions/loglevel.rc 283 284 :0 285 { WHITELIST=yes } 286 287 :0 288 { BULKTAG=yes } 289} 290