golden hour

/var/lib/spamassassin/3.004006/updates_spamassassin_org

File/Folder	Size	Actions
10_default_prefs.cf	8.56 KB
10_hasbase.cf	2.39 KB
20_advance_fee.cf	7.43 KB
20_aux_tlds.cf	44.85 KB
20_body_tests.cf	7.01 KB
20_compensate.cf	1.89 KB
20_dnsbl_tests.cf	10.3 KB
20_drugs.cf	15.16 KB
20_dynrdns.cf	11.15 KB
20_fake_helo_tests.cf	9.42 KB
20_freemail.cf	2.99 KB
20_freemail_domains.cf	40.53 KB
20_freemail_mailcom_domains.cf	4.32 KB
20_head_tests.cf	26.83 KB
20_html_tests.cf	10.79 KB
20_imageinfo.cf	5.18 KB
20_mailspike.cf	2.86 KB
20_meta_tests.cf	3.42 KB
20_net_tests.cf	1.84 KB
20_pdfinfo.cf	15.53 KB
20_phrases.cf	7.96 KB
20_porn.cf	2.01 KB
20_ratware.cf	16.48 KB
20_uri_tests.cf	5.9 KB
20_vbounce.cf	20.28 KB
23_bayes.cf	2.94 KB
25_accessdb.cf	1.51 KB
25_antivirus.cf	1.5 KB
25_arc.cf	1.76 KB
25_asn.cf	1.93 KB
25_dcc.cf	2.89 KB
25_dkim.cf	5.12 KB
25_dmarc.cf	2.46 KB
25_dnswl.cf	2.99 KB
25_pyzor.cf	1.49 KB
25_razor2.cf	3.09 KB
25_replace.cf	25.66 KB
25_spf.cf	4.3 KB
25_textcat.cf	1.73 KB
25_uribl.cf	19.53 KB
25_url_redirectors.cf	6.33 KB
25_url_shortener.cf	11.28 KB
30_text_de.cf	25.69 KB
30_text_fr.cf	19.34 KB
30_text_it.cf	1.82 KB
30_text_nl.cf	20.15 KB
30_text_pl.cf	16.85 KB
30_text_pt_br.cf	41.93 KB
50_scores.cf	37.27 KB
60_adsp_override_dkim.cf	9.12 KB
60_awl.cf	1.48 KB
60_bayes_stopwords.cf	14.73 KB
60_shortcircuit.cf	2.36 KB
60_txrep.cf	1.31 KB
60_welcomelist.cf	11.34 KB
60_welcomelist_auth.cf	74.76 KB
60_welcomelist_dkim.cf	10.83 KB
60_welcomelist_spf.cf	6.1 KB
60_welcomelist_subject.cf	3.82 KB
72_active.cf	523.43 KB
72_scores.cf	31.17 KB
73_sandbox_manual_scores.cf	4.26 KB
MIRRORED.BY	1.05 KB
STATISTICS-set0-72_scores.cf.txt	1.46 KB
STATISTICS-set1-72_scores.cf.txt	1.46 KB
STATISTICS-set2-72_scores.cf.txt	0 B
STATISTICS-set3-72_scores.cf.txt	0 B
languages	130.47 KB
local.cf	3.14 KB
regression_tests.cf	2.71 KB
sa-update-pubkey.txt	4.67 KB
user_prefs.template	1.87 KB

Edit: 60_welcomelist_spf.cf

# SpamAssassin rules file: default SPF welcomelists
#
# Please don't modify this file as your changes will be overwritten with
# the next update. Use /etc/mail/spamassassin/local.cf instead.
# See 'perldoc Mail::SpamAssassin::Conf' for details.
#
# <@LICENSE>
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to you under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at:
# 
#     http://www.apache.org/licenses/LICENSE-2.0
# 
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# </@LICENSE>

ifplugin Mail::SpamAssassin::Plugin::SPF

###########################################################################
# SPF welcomelist rules

# 4.0 / Bug 7826 renames whitelist to welcomelist and blacklist to blocklist
if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
  header USER_IN_SPF_WELCOMELIST	eval:check_for_spf_welcomelist_from()
  describe USER_IN_SPF_WELCOMELIST	From: address is in the user's SPF welcomelist
  tflags USER_IN_SPF_WELCOMELIST	userconf nice noautolearn net
  score USER_IN_SPF_WELCOMELIST		-100
  reuse USER_IN_SPF_WELCOMELIST

# Backwards compatibility
  # To disable set "enable_compat welcomelist_blocklist" in init.pre
  if !can(Mail::SpamAssassin::Conf::compat_welcomelist_blocklist)
    meta USER_IN_SPF_WHITELIST		(USER_IN_SPF_WELCOMELIST)
    describe USER_IN_SPF_WHITELIST	DEPRECATED: See USER_IN_SPF_WELCOMELIST
    tflags USER_IN_SPF_WHITELIST	userconf nice noautolearn net
    score USER_IN_SPF_WHITELIST		-100
    reuse USER_IN_SPF_WHITELIST
    score USER_IN_SPF_WELCOMELIST	-0.01
  endif

header USER_IN_DEF_SPF_WL		eval:check_for_def_spf_welcomelist_from()
  describe USER_IN_DEF_SPF_WL		From: address is in the default SPF welcome-list
  tflags USER_IN_DEF_SPF_WL		userconf nice noautolearn net
  reuse USER_IN_DEF_SPF_WL
endif
if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
  header USER_IN_SPF_WELCOMELIST	eval:check_for_spf_whitelist_from()
  describe USER_IN_SPF_WELCOMELIST	From: address is in the user's SPF welcomelist
  tflags USER_IN_SPF_WELCOMELIST	userconf nice noautolearn net
  score USER_IN_SPF_WELCOMELIST		-0.01
  reuse USER_IN_SPF_WELCOMELIST

meta USER_IN_SPF_WHITELIST		(USER_IN_SPF_WELCOMELIST)
  describe USER_IN_SPF_WHITELIST	DEPRECATED: See USER_IN_SPF_WELCOMELIST
  tflags USER_IN_SPF_WHITELIST		userconf nice noautolearn net
  score USER_IN_SPF_WHITELIST		-100
  reuse USER_IN_SPF_WHITELIST

header USER_IN_DEF_SPF_WL		eval:check_for_def_spf_whitelist_from()
  describe USER_IN_DEF_SPF_WL		From: address is in the default SPF welcome-list
  tflags USER_IN_DEF_SPF_WL		userconf nice noautolearn net
  reuse USER_IN_DEF_SPF_WL
endif

meta ENV_AND_HDR_SPF_MATCH	(USER_IN_DEF_SPF_WL && __ENV_AND_HDR_FROM_MATCH)
describe ENV_AND_HDR_SPF_MATCH	Env and Hdr From used in default SPF WL Match
tflags ENV_AND_HDR_SPF_MATCH	userconf nice noautolearn net

###########################################################################
# Default welcomelists.  These should be addresses which send mail that is often
# tagged (incorrectly) as spam; it also helps that they be addresses of big
# companies with lots of lawyers, so if spammers impersonate them, they'll get
# into big trouble, so it doesn't provide a shortcut around SpamAssassin.
#
# Whitelist and blacklist addresses are now file-glob-style patterns, so
# "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work.
#
# Please do not add unmoderated public mailing lists here.  They are
# too easily abused by spammers.

if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)

def_welcomelist_from_spf   *@nytimes.com
def_welcomelist_from_spf   *@amazon.com
def_welcomelist_from_spf   *@amazon.co.uk
def_welcomelist_from_spf   *@*.amazon.co.uk
def_welcomelist_from_spf   *@ora.com
def_welcomelist_from_spf   *@*.ora.com
def_welcomelist_from_spf   *@mypoints.com
def_welcomelist_from_spf   *@*.mypoints.com
def_welcomelist_from_spf   *@ebay.com
def_welcomelist_from_spf   *@foolsubs.com
def_welcomelist_from_spf   *@match.com

# bugtraq: can contain malicious Javascript etc.
def_welcomelist_from_spf   *@securityfocus.com

def_welcomelist_from_spf   *@mediaunspun.imakenews.net

# sender of Cringley newsletter
def_welcomelist_from_spf   *@bdcimail.com

# Silicon.com newslettters - we see thousands of these
def_welcomelist_from_spf   *@silicon.com

# C|Net news.com newsletters
def_welcomelist_from_spf   *@newsletter.online.com

# bug 1348
def_welcomelist_from_spf   *@enews.buy.com
def_welcomelist_from_spf   *@palm.m0.net
def_welcomelist_from_spf   *@handspring.4at1.com

endif

###
### For <4.0 compatibility
###

if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)

def_whitelist_from_spf   *@nytimes.com
def_whitelist_from_spf   *@amazon.com
def_whitelist_from_spf   *@amazon.co.uk
def_whitelist_from_spf   *@*.amazon.co.uk
def_whitelist_from_spf   *@ora.com
def_whitelist_from_spf   *@*.ora.com
def_whitelist_from_spf   *@mypoints.com
def_whitelist_from_spf   *@*.mypoints.com
def_whitelist_from_spf   *@ebay.com
def_whitelist_from_spf   *@foolsubs.com
def_whitelist_from_spf   *@match.com

# bugtraq: can contain malicious Javascript etc.
def_whitelist_from_spf   *@securityfocus.com

def_whitelist_from_spf   *@mediaunspun.imakenews.net

# sender of Cringley newsletter
def_whitelist_from_spf   *@bdcimail.com

# Silicon.com newslettters - we see thousands of these
def_whitelist_from_spf   *@silicon.com

# C|Net news.com newsletters
def_whitelist_from_spf   *@newsletter.online.com

# bug 1348
def_whitelist_from_spf   *@enews.buy.com
def_whitelist_from_spf   *@palm.m0.net
def_whitelist_from_spf   *@handspring.4at1.com

endif

###
###
###

endif # Mail::SpamAssassin::Plugin::SPF