[Greylist-users] whitelisting

[John W. Baxter]

On 6/1/06 1:15 PM, "Allan E. Johannesen" <aej at wpi.edu> wrote:

> 
> It looks like google retries from inconsistent ips.  Does anyone have a
> whitelist for gmail?
> 

Here is what I use as a starting point, for those domains which publish SPF.
(See, it's not entirely useless.)

# host -ttxt gmail.com
gmail.com text "v=spf1 redirect=_spf.google.com"

# host -ttxt _spf.google.com
_spf.google.com text "v=spf1 ip4:216.239.56.0/23 ip4:64.233.160.0/19
ip4:66.249.80.0/20 ip4:72.14.192.0/18 ?all"

We also have a "trusted domains" list which bypasses greylisting when a
domain we call trusted publishes SPF and the SPF result is a "pass" of some
sort.  (Our home-grown greylisting daemon makes that decision, so I can't
post useful stuff about it.)

  --John