Harvest netblocks of good MTAs from SPF for whitelisting from greylisting

"Constantine A. Murenin" <[email protected]> Tue, 12 Feb 2013 13:12:15 -0800
Newsgroups gmane.mail.spam.spf.discuss
Message-ID <CAPKkNb7POvBRBEG4b2WZP3yVgOe0XyEO1K85oFnpUBTi_DErgQ@mail.gmail.com>
Hi,

I'm configuring greylisting with pf(4) and OpenBSD spamd, and one of
the things I would like to do is explicitly whitelist good MTAs of
e.g. google.com, apple.com, ebay.com, schwab.com, freebsd.org,
uwaterloo.ca etc.

It seems like with the proliferation of SPF, this might be relatively
easy to do: the netblocks of many valid email servers are individually
published by each respective domain through various SPF-compliant
records.  (And even when there are no explicit "ip4" or "ip6" records
with the IP addresses or netblocks, an explicit or implied "v=spf1 a
mx" could still do the trick.)

What's left is to have a list of "good" domains, and a script that
will go through all such domains once a week to compile the list of
good netblocks.  Such netblocks could then be exempt from any kind of
greylisting, such as to never delay the mail from trustworthy domains
whatsoever.

Cheers,
Constantine.