whitelist spam from microsoft

[mailscanner-user]

Some users have for strange reasons subscribed to newsletters from
microsoft.
These messages are often tagged as spam.:
      .90 FREE_TRIAL Free Trial
      0.26 FROM_HAS_MIXED_NUMS From: contains numbers mixed in with letters
      0.10 HTML_50_60 Message is 50% to 60% HTML
      0.60 HTML_FONT_INVISIBLE HTML font color is same as background
      0.10 HTML_MESSAGE HTML included in message
      0.32 MIME_HTML_ONLY Message only has text/html MIME parts
      2.70 REPLY_TO_ULINE_NUMS Reply-To: has an underline and
numbers/letters


Is it possible to make a rule that mail claiming to come from microsoft (or
other selected domains) must come from a server, where forward and backward
ip matches to microsoft.com?

This seems ok.
Received: from delivery.pens.microsoft.com (delivery.pens.microsoft.com
[207.46.248.66])

However this seems faked:
From: Microsoft Alerts from eBay msftalerts at microsoft.com
Received: from bayanmsb03.phx.gbl (bayanmsb03.bay.us.msn.net [64.4.12.146]
(may be forged))
seems bad.

Leif

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html