That sounds like the same request from yesterday you just want to
    white list trusted sources, in which case, yes, place this in
    sf_mfilter_local.txt and add trusted domains/addresses as needed...
    
    
        ChrisP.
    
    
#------------------------------------------------------------------------------------------------------------------------
    # Rules for trusted domains based on SPF, we check the address in
    the 'spf' header is the domain we trust... (since from may be
    forged)
    if (isin("Received-SPF","res=PASS")) then
        if (rexp("Received-SPF","\
<service@intl\.paypal\.com\>"))
    then
            setflag("_TRUSTDOM")
        end if
    end if
    
    
    # Rules for trusted domains based on DKIM (preferred), there is no
    need to add these ones to the spf rules above too, only use spf if
    no dkim header...
    if (isin("Authentication-Results","dkim=pass")) then
        if (rexp(from,
"service@intl\.paypal\.com$")) then
            setflag("_TRUSTDOM")
            end if
        if (rexp(from,HIDDEN@es\.audible\.com\.au$")) then
            setflag("_TRUSTDOM")
            end if
    end if
    
    # If source is verified by spf or dkim, and domain is enherrently
    trustworthy, then zero out the spam score...
    if (evalflags("_TRUSTDOM")) then
        call feature_manual(0.01,"TrustedDom") 
    end if
    
    
On 22/04/2016 1:09 a.m., Steven wrote:
    
    
      
        See this is my dilemma.  I specifically remember being
          advised to use the friends system because it was the most
          effective at defeating spam.  The only caveat I found was yes
          you do need to monitor your quarantine.  But you also get
          emailed notifications to check.  I've had success with it.  I
          understand some people wouldn't want to use it.  
        
        
        
        So instead of the silent option is there a way to globally
          override just the challenge message being sent to certain
          domains that pass SPF checks.  So its like white listing a
          domain but only after it still passes checks to ensure its
          legit.  Is this possible?
        
        
        
        
        
        
        
        
        
        
        
        
        Yes choose the 'silent'
          option.  Personally I recommend against this option.
          
          ChrisP.
          
          
          
On 21/04/2016 7:58 a.m., Steven
            wrote:
          
          
            
              Is there a way of still using the friends lists but
                without the challenge messages?