Best practices for white and black lists?

[Bill Anderson]

I am trying to figure our the best method for creating white and black
lists.  It seems like there are several places to put these entries
mailscanner/spamassasin/or sendmail.

The first scenario is mail that did not get tagged as spam but should have.
Should I put in the ip in the access sendmail file or is ther a black list
for mailscanner?  Is there a simpler way?

The second scenario is something get's reported as spam but should not.  Can
I use the auto whitelist feature?  If so, how does it work, I couldnt find
any information on configuratio or use?  What is the best way?

There probably is a million ways to cut it, but I am looking for best
practices that seem to work for people.  My goal is to limit the amount of
management and using automated features would be great.  Thanks.